{
  "cveId": "CVE-2022-49728",
  "url": "https://patchblox.com/security/cve/CVE-2022-49728",
  "summary": "CVE-2022-49728 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49728, released February 26, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: Fix signed integer overflow in __ip6_appen...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ipv6: Fix signed integer overflow in __ip6_append_data  Resurrect ubsan overflow checks and ubsan report this warning, fix it by change the variable [length] type to size_t.  UBSAN: signed-integer-overflow in net/ipv6/ip6_output.c:1489:19 2147479552 \u002B 8567 cannot be represented in type \u0027int\u0027 CPU: 0 PID: 253 Comm: err Not tainted 5.16.0\u002B #1 Hardware name: linux,dummy-virt (DT) Call trace:   dump_backtrace\u002B0x214/0x230   show_stack\u002B0x30/0x78   dump_stack_lvl\u002B0xf8/0x118   dump_stack\u002B0x18/0x30   ubsan_epilogue\u002B0x18/0x60   handle_overflow\u002B0xd0/0xf0   __ubsan_handle_add_overflow\u002B0x34/0x44   __ip6_append_data.isra.48\u002B0x1598/0x1688   ip6_append_data\u002B0x128/0x260   udpv6_sendmsg\u002B0x680/0xdd0   inet6_sendmsg\u002B0x54/0x90   sock_sendmsg\u002B0x70/0x88   ____sys_sendmsg\u002B0xe8/0x368   ___sys_sendmsg\u002B0x98/0xe0   __sys_sendmmsg\u002B0xf4/0x3b8   __arm64_sys_sendmmsg\u002B0x34/0x48   invoke_syscall\u002B0x64/0x160   el0_svc_common.constprop.4\u002B0x124/0x300   do_el0_svc\u002B0x44/0xc8   el0_svc\u002B0x3c/0x1e8   el0t_64_sync_handler\u002B0x88/0xb0   el0t_64_sync\u002B0x16c/0x170  Changes since v1: -Change the variable [length] type to unsigned, as Eric Dumazet suggested. Changes since v2: -Don\u0027t change exthdrlen type in ip6_make_skb, as Paolo Abeni suggested. Changes since v3: -Don\u0027t change ulen type in udpv6_sendmsg and l2tp_ip6_sendmsg, as Jakub Kicinski suggested.",
  "published": "2025-02-26T07:01:48Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00295,
  "epssPercentile": 0.22265,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.18.14-1",
      "fix": "DEBIAN-CVE-2022-49728",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49728",
      "released": "2025-02-26T07:01:48Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.18.14-1",
      "fix": "DEBIAN-CVE-2022-49728",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49728",
      "released": "2025-02-26T07:01:48Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "5.18.14-1",
      "fix": "DEBIAN-CVE-2022-49728",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49728",
      "released": "2025-02-26T07:01:48Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}