{
  "cveId": "CVE-2022-49877",
  "url": "https://patchblox.com/security/cve/CVE-2022-49877",
  "summary": "CVE-2022-49877 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49877, released May 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf, sockmap: Fix the sk-\u003Esk_forward_alloc warni...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  bpf, sockmap: Fix the sk-\u003Esk_forward_alloc warning of sk_stream_kill_queues  When running \u0060test_sockmap\u0060 selftests, the following warning appears:    WARNING: CPU: 2 PID: 197 at net/core/stream.c:205 sk_stream_kill_queues\u002B0xd3/0xf0   Call Trace:   \u003CTASK\u003E   inet_csk_destroy_sock\u002B0x55/0x110   tcp_rcv_state_process\u002B0xd28/0x1380   ? tcp_v4_do_rcv\u002B0x77/0x2c0   tcp_v4_do_rcv\u002B0x77/0x2c0   __release_sock\u002B0x106/0x130   __tcp_close\u002B0x1a7/0x4e0   tcp_close\u002B0x20/0x70   inet_release\u002B0x3c/0x80   __sock_release\u002B0x3a/0xb0   sock_close\u002B0x14/0x20   __fput\u002B0xa3/0x260   task_work_run\u002B0x59/0xb0   exit_to_user_mode_prepare\u002B0x1b3/0x1c0   syscall_exit_to_user_mode\u002B0x19/0x50   do_syscall_64\u002B0x48/0x90   entry_SYSCALL_64_after_hwframe\u002B0x44/0xae  The root case is in commit 84472b436e76 (\u0022bpf, sockmap: Fix more uncharged while msg has more_data\u0022), where I used msg-\u003Esg.size to replace the tosend, causing breakage:    if (msg-\u003Eapply_bytes \u0026\u0026 msg-\u003Eapply_bytes \u003C tosend)     tosend = psock-\u003Eapply_bytes;",
  "published": "2025-05-01T15:16:12Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00202,
  "epssPercentile": 0.10143,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49877",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49877",
      "released": "2025-05-01T15:16:12Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49877",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49877",
      "released": "2025-05-01T15:16:12Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49877",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49877",
      "released": "2025-05-01T15:16:12Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}