Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-49727

ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg When len >= INT_MAX - transhdrlen, ulen = len + transhdrlen will be overflow. To fix, we can follow what udpv6 does and subtract the transhdrlen from the max.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a32e0eec7042b21ccb52896cf715e3e2641fed93 to < 2cf73c7cb6125083408d77f43d0e84d86aed0000affected
  • a32e0eec7042b21ccb52896cf715e3e2641fed93 to < 0e818d433fc2718fe4da044ffca7431812a7e04eaffected
  • a32e0eec7042b21ccb52896cf715e3e2641fed93 to < 6c4e3486d21173d60925ef52e512cae727b43d30affected
  • a32e0eec7042b21ccb52896cf715e3e2641fed93 to < 2f42389d270f2304c8855b0b63498a5a4d0c053daffected
  • a32e0eec7042b21ccb52896cf715e3e2641fed93 to < b8879ca1fd7348b4d5db7db86dcb97f60c73d751affected
  • a32e0eec7042b21ccb52896cf715e3e2641fed93 to < 27a37755ceb401111ded76810359d3adc4b268a1affected
  • a32e0eec7042b21ccb52896cf715e3e2641fed93 to < 034246122f5c5e2e2a0b9fe04e24517920e9beb1affected
  • a32e0eec7042b21ccb52896cf715e3e2641fed93 to < f638a84afef3dfe10554c51820c16e39a278c915affected

Linux Linux

Default version status: affected

  • 3.5affected
  • 0 to < 3.5unaffected
  • 4.9.320 to ≤ 4.9.*unaffected
  • 4.14.285 to ≤ 4.14.*unaffected
  • 4.19.249 to ≤ 4.19.*unaffected
  • 5.4.200 to ≤ 5.4.*unaffected
  • 5.10.124 to ≤ 5.10.*unaffected
  • 5.15.49 to ≤ 5.15.*unaffected
  • 5.18.6 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References