{
  "cveId": "CVE-2022-50655",
  "url": "https://patchblox.com/security/cve/CVE-2022-50655",
  "summary": "CVE-2022-50655 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50655, released December 9, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ppp: associate skb with a device at tx  Syzkalle...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ppp: associate skb with a device at tx  Syzkaller triggered flow dissector warning with the following:  r0 = openat$ppp(0xffffffffffffff9c, \u0026(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, \u0026(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, \u0026(0x7f0000000240)={0x2, \u0026(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}) pwritev(r0, \u0026(0x7f0000000040)=[{\u0026(0x7f0000000140)=\u0027\\x00!\u0027, 0x2}], 0x1, 0x0, 0x0)  [    9.485814] WARNING: CPU: 3 PID: 329 at net/core/flow_dissector.c:1016 __skb_flow_dissect\u002B0x1ee0/0x1fa0 [    9.485929]  skb_get_poff\u002B0x53/0xa0 [    9.485937]  bpf_skb_get_pay_offset\u002B0xe/0x20 [    9.485944]  ? ppp_send_frame\u002B0xc2/0x5b0 [    9.485949]  ? _raw_spin_unlock_irqrestore\u002B0x40/0x60 [    9.485958]  ? __ppp_xmit_process\u002B0x7a/0xe0 [    9.485968]  ? ppp_xmit_process\u002B0x5b/0xb0 [    9.485974]  ? ppp_write\u002B0x12a/0x190 [    9.485981]  ? do_iter_write\u002B0x18e/0x2d0 [    9.485987]  ? __import_iovec\u002B0x30/0x130 [    9.485997]  ? do_pwritev\u002B0x1b6/0x240 [    9.486016]  ? trace_hardirqs_on\u002B0x47/0x50 [    9.486023]  ? __x64_sys_pwritev\u002B0x24/0x30 [    9.486026]  ? do_syscall_64\u002B0x3d/0x80 [    9.486031]  ? entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  Flow dissector tries to find skb net namespace either via device or via socket. Neigher is set in ppp_send_frame, so let\u0027s manually use ppp-\u003Edev.",
  "published": "2025-12-09T01:16:48Z",
  "severity": "",
  "epss": 0.00209,
  "epssPercentile": 0.11169,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50655",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50655",
      "released": "2025-12-09T01:16:48Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50655",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50655",
      "released": "2025-12-09T01:16:48Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.4-1",
      "fix": "DEBIAN-CVE-2022-50655",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50655",
      "released": "2025-12-09T01:16:48Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}