{
  "cveId": "CVE-2022-50706",
  "url": "https://patchblox.com/security/cve/CVE-2022-50706",
  "summary": "CVE-2022-50706 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-50706, released December 24, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/ieee802154: don\u0027t warn zero-sized raw_sendms...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net/ieee802154: don\u0027t warn zero-sized raw_sendmsg()  syzbot is hitting skb_assert_len() warning at __dev_queue_xmit() [1], for PF_IEEE802154 socket\u0027s zero-sized raw_sendmsg() request is hitting __dev_queue_xmit() with skb-\u003Elen == 0.  Since PF_IEEE802154 socket\u0027s zero-sized raw_sendmsg() request was able to return 0, don\u0027t call __dev_queue_xmit() if packet length is 0.    ----------   #include \u003Csys/socket.h\u003E   #include \u003Cnetinet/in.h\u003E    int main(int argc, char *argv[])   {     struct sockaddr_in addr = { .sin_family = AF_INET, .sin_addr.s_addr = htonl(INADDR_LOOPBACK) };     struct iovec iov = { };     struct msghdr hdr = { .msg_name = \u0026addr, .msg_namelen = sizeof(addr), .msg_iov = \u0026iov, .msg_iovlen = 1 };     sendmsg(socket(PF_IEEE802154, SOCK_RAW, 0), \u0026hdr, 0);     return 0;   }   ----------  Note that this might be a sign that commit fd1894224407c484 (\u0022bpf: Don\u0027t redirect packets with invalid pkt_len\u0022) should be reverted, for skb-\u003Elen == 0 was acceptable for at least PF_IEEE802154 socket.",
  "published": "2025-12-24T11:15:50Z",
  "severity": "",
  "epss": 0.00206,
  "epssPercentile": 0.10671,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.3-1",
      "fix": "DEBIAN-CVE-2022-50706",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50706",
      "released": "2025-12-24T11:15:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.3-1",
      "fix": "DEBIAN-CVE-2022-50706",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50706",
      "released": "2025-12-24T11:15:50Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.3-1",
      "fix": "DEBIAN-CVE-2022-50706",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-50706",
      "released": "2025-12-24T11:15:50Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}