{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"8b68e53d56697a59b5c53893b53f508bbdf272a0","status":"affected","version":"5293efe62df81908f2e90c9820c7edcc8e61f5e9","versionType":"git"},{"lessThan":"6204bf78b2a903b96ba43afff6abc0b04d6e0462","status":"affected","version":"5293efe62df81908f2e90c9820c7edcc8e61f5e9","versionType":"git"},{"lessThan":"a75987714bd2d8e59840667a28e15c1fa5c47554","status":"affected","version":"5293efe62df81908f2e90c9820c7edcc8e61f5e9","versionType":"git"},{"lessThan":"72f2dc8993f10262092745a88cb2dd0fef094f23","status":"affected","version":"5293efe62df81908f2e90c9820c7edcc8e61f5e9","versionType":"git"},{"lessThan":"fd1894224407c484f652ad456e1ce423e89bb3eb","status":"affected","version":"5293efe62df81908f2e90c9820c7edcc8e61f5e9","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"4.9"},{"lessThan":"4.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.212","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.141","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.65","versionType":"semver"},{"lessThanOrEqual":"5.19.*","status":"unaffected","version":"5.19.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2022-49975","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Don't redirect packets with invalid pkt_len\n\nSyzbot found an issue [1]: fq_codel_drop() try to drop a flow whitout any\nskbs, that is, the flow->head is null.\nThe root cause, as the [2] says, is because that bpf_prog_test_run_skb()\nrun a bpf prog which redirects empty skbs.\nSo we should determine whether the length of the packet modified by bpf\nprog or others like bpf_prog_test is valid before forwarding it directly.","epss":{"date":"2026-11-05","percentile":0.18611,"score":0.00266},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793908812903,"publishedAt":1750244438157,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/8b68e53d56697a59b5c53893b53f508bbdf272a0"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6204bf78b2a903b96ba43afff6abc0b04d6e0462"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a75987714bd2d8e59840667a28e15c1fa5c47554"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/72f2dc8993f10262092745a88cb2dd0fef094f23"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/fd1894224407c484f652ad456e1ce423e89bb3eb"}],"remediation":[],"revision":"74b6ee1707f048c56537ad48de6214a1b124a2e1fec00ac04d19721852460b14","sources":[{"modifiedAt":1793908812903,"name":"CNA: Linux","retrievedAt":1793909492531,"url":"https://www.cve.org/CVERecord?id=CVE-2022-49975"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793909520395,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-49975"}],"ssvc":{"assessedAt":1793908341290,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"bpf: Don't redirect packets with invalid pkt_len","updatedAt":1793909520395}