{"id":"CVE-2022-49048","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix panic when forwarding a pkt with no in6 dev\n\nkongweibin reported a kernel panic in ip6_forward() when input interface\nhas no in6 dev associated.\n\nThe followin…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix panic when forwarding a pkt with no in6 dev\n\nkongweibin reported a kernel panic in ip6_forward() when input interface\nhas no in6 dev associated.\n\nThe followin…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.19.199, < 4.19.239","linux_kernel >= 5.4.136, < 5.4.190","linux_kernel >= 5.10.54, < 5.10.112","linux_kernel >= 5.13.6, < 5.14","linux_kernel >= 5.14.1, < 5.15.35","linux_kernel >= 5.16, < 5.17.4","linux_kernel = 5.14","linux_kernel = 5.18"],"patched":["linux_kernel 5.17.4"],"published":"2025-02-26","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:17:22.530","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-49048","references":[{"url":"https://git.kernel.org/stable/c/74b68f5249f16c5f7f675d0f604fa6ae20e3a151","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a263712ba8c9ded25dd9d2d5ced11bcea5b33a3e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ab2f5afb7af5c68389e8c7dd29e0a98fbeaaa435","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/adee01bbf6cb5b3e4ed08be8ff866aac90f13836","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e3fa461d8b0e185b7da8a101fe94dfe6dd500ac0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e69fb3de87a8923e5931a272a38fa3cceb01da44","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00692,"epssPercentile":0.52692,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-15T21:06:06.258199Z"},"ingestedAt":"2026-10-15T21:45:11.291Z","slug":"CVE-2022-49048","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix panic when forwarding a pkt with no in6 dev\n\nkongweibin reported a kernel panic in ip6_forward() when input interface\nhas no in6 dev associated.\n\nThe following tc commands were used to reproduce this panic:\ntc qdisc del dev vxlan100 root\ntc qdisc add dev vxlan100 root netem corrupt 5%\n\n## Affected\n\n- `linux_kernel >= 4.19.199, < 4.19.239`\n- `linux_kernel >= 5.4.136, < 5.4.190`\n- `linux_kernel >= 5.10.54, < 5.10.112`\n- `linux_kernel >= 5.13.6, < 5.14`\n- `linux_kernel >= 5.14.1, < 5.15.35`\n- `linux_kernel >= 5.16, < 5.17.4`\n- `linux_kernel = 5.14`\n- `linux_kernel = 5.18`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 5.17.4`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}