{"id":"CVE-2022-49776","title":"macvlan: enforce a consistent minimal mtu","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: enforce a consistent minimal mtu\n\nmacvlan should enforce a minimal mtu of 68, even at link creation.\n\nThis patch avoids the current behavior (which could lead …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < d2fee7d121d189c6dc905b727d60e7043a6655bb","Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < 650137a7c0b2892df2e5b0bc112d7b09a78c93c8","Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < a62aa84fe19eb24d083d600a074c009a0a66d4f3","Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < e929ec98c0c3b10d9c07f3776df0c1a02d7a763e","Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < e41cbf98df22d08402e65174d147cbb187fe1a33","Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < 2b055c719d8f94c15ec9b7659978133030c6a353","Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < b64085b00044bdf3cd1c9825e9ef5b2e0feae91a","Linux 4.10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T19:47:27.116715Z"},"published":"2025-05-01","updated":"2026-11-05","sourceUpdated":"2026-11-05T19:49:43.688Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-49776","references":[{"url":"https://git.kernel.org/stable/c/d2fee7d121d189c6dc905b727d60e7043a6655bb"},{"url":"https://git.kernel.org/stable/c/650137a7c0b2892df2e5b0bc112d7b09a78c93c8"},{"url":"https://git.kernel.org/stable/c/a62aa84fe19eb24d083d600a074c009a0a66d4f3"},{"url":"https://git.kernel.org/stable/c/e929ec98c0c3b10d9c07f3776df0c1a02d7a763e"},{"url":"https://git.kernel.org/stable/c/e41cbf98df22d08402e65174d147cbb187fe1a33"},{"url":"https://git.kernel.org/stable/c/2b055c719d8f94c15ec9b7659978133030c6a353"},{"url":"https://git.kernel.org/stable/c/b64085b00044bdf3cd1c9825e9ef5b2e0feae91a"}],"tags":["cve.org"],"epss":0.00218,"epssPercentile":0.12322,"ingestedAt":"2026-11-05T22:38:31.589Z","slug":"CVE-2022-49776","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: enforce a consistent minimal mtu\n\nmacvlan should enforce a minimal mtu of 68, even at link creation.\n\nThis patch avoids the current behavior (which could lead to crashes\nin ipv6 stack if the link is brought up)\n\n$ ip link add macvlan1 link eno1 mtu 8 type macvlan  # This should fail !\n$ ip link sh dev macvlan1\n5: macvlan1@eno1: <BROADCAST,MULTICAST> mtu 8 qdisc noop\n    state DOWN mode DEFAULT group default qlen 1000\n    link/ether 02:47:6c:24:74:82 brd ff:ff:ff:ff:ff:ff\n$ ip link set macvlan1 mtu 67\nError: mtu less than device minimum.\n$ ip link set macvlan1 mtu 68\n$ ip link set macvlan1 mtu 8\nError: mtu less than device minimum.\n\n## Affected\n\n- `Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < d2fee7d121d189c6dc905b727d60e7043a6655bb`\n- `Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < 650137a7c0b2892df2e5b0bc112d7b09a78c93c8`\n- `Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < a62aa84fe19eb24d083d600a074c009a0a66d4f3`\n- `Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < e929ec98c0c3b10d9c07f3776df0c1a02d7a763e`\n- `Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < e41cbf98df22d08402e65174d147cbb187fe1a33`\n- `Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < 2b055c719d8f94c15ec9b7659978133030c6a353`\n- `Linux >= 91572088e3fdbf4fe31cf397926d8b890fdb3237 < b64085b00044bdf3cd1c9825e9ef5b2e0feae91a`\n- `Linux 4.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}