---
id: CVE-2022-49972
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xsk: Fix corrupted packets for XDP_SHARED_UMEM

  Fix an issue in XDP_SHARED_UMEM mode together with aligned mode where
  packets are corrupted for the second and any furth…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  xsk: Fix corrupted packets for XDP_SHARED_UMEM

  Fix an issue in XDP_SHARED_UMEM mode together with aligned mode where
  packets are corrupted for the second and any furth…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.16, < 5.19.8'
  - linux_kernel = 6.0
patched:
  - linux_kernel 5.19.8
published: '2025-06-18'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:26.413'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-49972'
references:
  - url: 'https://git.kernel.org/stable/c/2c75891d56ab6fe5ba0d415bfad91d514a4027cd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/58ca14ed98c87cfe0d1408cc65a9745d9e9b7a56'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00226
epssPercentile: 0.13268
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:29:56.202425Z'
ingestedAt: '2026-10-15T21:45:11.285Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

xsk: Fix corrupted packets for XDP_SHARED_UMEM

Fix an issue in XDP_SHARED_UMEM mode together with aligned mode where
packets are corrupted for the second and any further sockets bound to
the same umem. In other words, this does not affect the first socket
bound to the umem. The culprit for this bug is that the initialization
of the DMA addresses for the pre-populated xsk buffer pool entries was
not performed for any socket but the first one bound to the umem. Only
the linear array of DMA addresses was populated. Fix this by populating
the DMA addresses in the xsk buffer pool for every socket bound to the
same umem.

## Affected

- `linux_kernel >= 5.16, < 5.19.8`
- `linux_kernel = 6.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 5.19.8`