{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"d2fee7d121d189c6dc905b727d60e7043a6655bb","status":"affected","version":"91572088e3fdbf4fe31cf397926d8b890fdb3237","versionType":"git"},{"lessThan":"650137a7c0b2892df2e5b0bc112d7b09a78c93c8","status":"affected","version":"91572088e3fdbf4fe31cf397926d8b890fdb3237","versionType":"git"},{"lessThan":"a62aa84fe19eb24d083d600a074c009a0a66d4f3","status":"affected","version":"91572088e3fdbf4fe31cf397926d8b890fdb3237","versionType":"git"},{"lessThan":"e929ec98c0c3b10d9c07f3776df0c1a02d7a763e","status":"affected","version":"91572088e3fdbf4fe31cf397926d8b890fdb3237","versionType":"git"},{"lessThan":"e41cbf98df22d08402e65174d147cbb187fe1a33","status":"affected","version":"91572088e3fdbf4fe31cf397926d8b890fdb3237","versionType":"git"},{"lessThan":"2b055c719d8f94c15ec9b7659978133030c6a353","status":"affected","version":"91572088e3fdbf4fe31cf397926d8b890fdb3237","versionType":"git"},{"lessThan":"b64085b00044bdf3cd1c9825e9ef5b2e0feae91a","status":"affected","version":"91572088e3fdbf4fe31cf397926d8b890fdb3237","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"4.10"},{"lessThan":"4.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.14.*","status":"unaffected","version":"4.14.300","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.267","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.225","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.156","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.80","versionType":"semver"},{"lessThanOrEqual":"6.0.*","status":"unaffected","version":"6.0.10","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.1","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49776","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: enforce a consistent minimal mtu\n\nmacvlan should enforce a minimal mtu of 68, even at link creation.\n\nThis patch avoids the current behavior (which could lead to crashes\nin ipv6 stack if the link is brought up)\n\n$ ip link add macvlan1 link eno1 mtu 8 type macvlan  # This should fail !\n$ ip link sh dev macvlan1\n5: macvlan1@eno1: <BROADCAST,MULTICAST> mtu 8 qdisc noop\n    state DOWN mode DEFAULT group default qlen 1000\n    link/ether 02:47:6c:24:74:82 brd ff:ff:ff:ff:ff:ff\n$ ip link set macvlan1 mtu 67\nError: mtu less than device minimum.\n$ ip link set macvlan1 mtu 68\n$ ip link set macvlan1 mtu 8\nError: mtu less than device minimum.","epss":{"date":"2026-11-05","percentile":0.12338,"score":0.00218},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908183688,"publishedAt":1746108552572,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d2fee7d121d189c6dc905b727d60e7043a6655bb"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/650137a7c0b2892df2e5b0bc112d7b09a78c93c8"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a62aa84fe19eb24d083d600a074c009a0a66d4f3"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e929ec98c0c3b10d9c07f3776df0c1a02d7a763e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e41cbf98df22d08402e65174d147cbb187fe1a33"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/2b055c719d8f94c15ec9b7659978133030c6a353"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b64085b00044bdf3cd1c9825e9ef5b2e0feae91a"}],"remediation":[],"revision":"4e1017e9043b242d758d8d5db5792f15aa9291e3e01c69781c5fac0b89e1012b","sources":[{"modifiedAt":1793908183688,"name":"CNA: Linux","retrievedAt":1793909407972,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49776"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909457787,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49776"}],"ssvc":{"assessedAt":1793908047116,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"macvlan: enforce a consistent minimal mtu","updatedAt":1793909457787}