01 Record

CVE-2022-50253

bpf: make sure skb->len != 0 when redirecting to a tunneling device

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

bpf: make sure skb->len != 0 when redirecting to a tunneling device

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 5.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-15 14:02Z1 YR AGO

Last updated

2026-05-11 19:15Z5 MO AGO

Reserved

2025-09-15

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-130Improper Handling of Length Parameter InconsistencyBase

Data version

5.2

Document digest

2febfe0c5cf43a754e4b07b332755a78862497c6f9a203c34a3fdf4de70d70ab

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4e3264d21b90984c2165e8fe5a7b64cf25bc2c2d to < ffbccc5fb0a67424e12f7f8da210c04c8063f797, 4e3264d21b90984c2165e8fe5a7b64cf25bc2c2d to < e6a63203e5a90a39392fa1a7ffc60f5e9baf642a, 4e3264d21b90984c2165e8fe5a7b64cf25bc2c2d to < 772431f30ca040cfbf31b791d468bac6a9ca74d3, 4e3264d21b90984c2165e8fe5a7b64cf25bc2c2d to < 6d935a02658be82585ecb39aab339faa84496650, 4e3264d21b90984c2165e8fe5a7b64cf25bc2c2d to < 5d3f4478d22b2cb1810f6fe0f797411e9d87b3e5, 4e3264d21b90984c2165e8fe5a7b64cf25bc2c2d to < 1b65704b8c08ae92db29f720d3b298031131da53, 4e3264d21b90984c2165e8fe5a7b64cf25bc2c2d to < f186303845a01cc7e991f9dc51d7e5a3cdc7aedb, 4e3264d21b90984c2165e8fe5a7b64cf25bc2c2d to < 07ec7b502800ba9f7b8b15cb01dd6556bb41aaca, 4.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/ffbccc5fb0a67424e12f7f8da210c04c8063f797
git.kernel.orghttps://git.kernel.org/stable/c/e6a63203e5a90a39392fa1a7ffc60f5e9baf642a
git.kernel.orghttps://git.kernel.org/stable/c/772431f30ca040cfbf31b791d468bac6a9ca74d3
git.kernel.orghttps://git.kernel.org/stable/c/6d935a02658be82585ecb39aab339faa84496650
git.kernel.orghttps://git.kernel.org/stable/c/5d3f4478d22b2cb1810f6fe0f797411e9d87b3e5
git.kernel.orghttps://git.kernel.org/stable/c/1b65704b8c08ae92db29f720d3b298031131da53
git.kernel.orghttps://git.kernel.org/stable/c/f186303845a01cc7e991f9dc51d7e5a3cdc7aedb
git.kernel.orghttps://git.kernel.org/stable/c/07ec7b502800ba9f7b8b15cb01dd6556bb41aaca

07 Fixed in

Debian 12

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.