Vulnerability-Lookup

BDU:2026-02229 (CVE-2022-49620)

Vulnerability from fstec – Published: 2026-02-25 – Updated: 2026-02-25 – View on bdu.fstec.ru Fixed

Title

Уязвимость функции tipc_sk_create() модуля net/tipc/socket.c реализации протокола TIPC ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость функции tipc_sk_create() модуля net/tipc/socket.c реализации протокола TIPC ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:N/I:N/A:C

5.5 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation, Resource exhaustion

Incidents

Being clarified

Remediation

Software update

CWE

CWE-664 - Недостаточный контроль ресурса в период его существования
CWE-911 - Неправильное обновление счетчика ссылок

Aliases

CVE-2022-49620

References

20 references

URL
https://git.kernel.org/stable/c/efa78f2ae363428525fb4981bb63c555ee79f3c7
https://git.kernel.org/stable/c/ef488669b2652bde5b6ee5a409a5b048a2a50db4
https://git.kernel.org/stable/c/833ecd0eae76eadf81d6d747bb5bc992d1151867
https://git.kernel.org/stable/c/638fa20b618b2bbcf86da71231624cc82121a036
https://git.kernel.org/stable/c/7bc9e7f70bc57d8f02ffea2a42094281effb15ef
https://git.kernel.org/stable/c/3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2
https://git.kernel.org/stable/c/4919d82f7041157a421ca9bf39a78551d5ad8a1b
https://www.cve.org/CVERecord?id=CVE-2022-49620
https://lore.kernel.org/linux-cve-announce/2025022615-CVE-2022-49620-dca0@gregkh/
https://git.kernel.org/linus/00aff3590fc0a73bddd3b743863c14e76fd35c0c
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.324
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.289
https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.253
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.207
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.132
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.56
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13
https://security-tracker.debian.org/tracker/CVE-2022-49620
https://access.redhat.com/security/cve/cve-2022-49620
https://ubuntu.com/security/CVE-2022-49620

Impacted products

4 products from 4 vendors

Vendors

Canonical Ltd., Сообщество свободного программного обеспечения, Red Hat, Inc.

Products

Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, Linux

Versions

16.04 LTS (Ubuntu), 18.04 LTS (Ubuntu), 20.04 LTS (Ubuntu), 11 (Debian GNU/Linux), 22.04 LTS (Ubuntu), 9 (Red Hat Enterprise Linux), от 5.16 до 5.18.12 включительно (Linux), от 5.5 до 5.10.131 включительно (Linux), от 5.11 до 5.15.55 включительно (Linux), от 4.10 до 4.14.288 включительно (Linux), от 4.15 до 4.19.252 включительно (Linux), от 4.20 до 5.4.206 включительно (Linux), от 3.18 до 4.9.323 включительно (Linux)

Product types

Operating system

Platforms

Canonical Ltd. Ubuntu 16.04 LTS, Canonical Ltd. Ubuntu 18.04 LTS, Canonical Ltd. Ubuntu 20.04 LTS, Сообщество свободного программного обеспечения Debian GNU/Linux 11, Canonical Ltd. Ubuntu 22.04 LTS, Red Hat, Inc. Red Hat Enterprise Linux 9, Сообщество свободного программного обеспечения Linux от 5.16 до 5.18.12 включительно, Сообщество свободного программного обеспечения Linux от 5.5 до 5.10.131 включительно, Сообщество свободного программного обеспечения Linux от 5.11 до 5.15.55 включительно, Сообщество свободного программного обеспечения Linux от 4.10 до 4.14.288 включительно, Сообщество свободного программного обеспечения Linux от 4.15 до 4.19.252 включительно, Сообщество свободного программного обеспечения Linux от 4.20 до 5.4.206 включительно, Сообщество свободного программного обеспечения Linux от 3.18 до 4.9.323 включительно

Mitigations

В условиях отсутствия обновлений безопасности от производителя рекомендуется придерживаться "Рекомендаций по безопасной настройке операционных систем LINUX", изложенных в методическом документе ФСТЭК России, утверждённом 25 декабря 2022 года. Использование рекомендаций: Для Linux: https://git.kernel.org/stable/c/efa78f2ae363428525fb4981bb63c555ee79f3c7 https://git.kernel.org/stable/c/ef488669b2652bde5b6ee5a409a5b048a2a50db4 https://git.kernel.org/stable/c/833ecd0eae76eadf81d6d747bb5bc992d1151867 https://git.kernel.org/stable/c/638fa20b618b2bbcf86da71231624cc82121a036 https://git.kernel.org/stable/c/7bc9e7f70bc57d8f02ffea2a42094281effb15ef https://git.kernel.org/stable/c/3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2 https://git.kernel.org/stable/c/4919d82f7041157a421ca9bf39a78551d5ad8a1b https://www.cve.org/CVERecord?id=CVE-2022-49620 https://lore.kernel.org/linux-cve-announce/2025022615-CVE-2022-49620-dca0@gregkh/ https://git.kernel.org/linus/00aff3590fc0a73bddd3b743863c14e76fd35c0c https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.324 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.289 https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.253 https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.207 https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.132 https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.56 https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13 Для Debian GNU/Linux: https://security-tracker.debian.org/tracker/CVE-2022-49620 Для программных продуктов Red Hat Inc.: https://access.redhat.com/security/cve/cve-2022-49620 Для Ubuntu: https://ubuntu.com/security/CVE-2022-49620

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Red Hat, Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16.04 LTS (Ubuntu), 18.04 LTS (Ubuntu), 20.04 LTS (Ubuntu), 11 (Debian GNU/Linux), 22.04 LTS (Ubuntu), 9 (Red Hat Enterprise Linux), \u043e\u0442 5.16 \u0434\u043e 5.18.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.5 \u0434\u043e 5.10.131 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.11 \u0434\u043e 5.15.55 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.10 \u0434\u043e 4.14.288 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.15 \u0434\u043e 4.19.252 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 4.20 \u0434\u043e 5.4.206 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 3.18 \u0434\u043e 4.9.323 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\n\u0414\u043b\u044f Linux:\nhttps://git.kernel.org/stable/c/efa78f2ae363428525fb4981bb63c555ee79f3c7\nhttps://git.kernel.org/stable/c/ef488669b2652bde5b6ee5a409a5b048a2a50db4\nhttps://git.kernel.org/stable/c/833ecd0eae76eadf81d6d747bb5bc992d1151867\nhttps://git.kernel.org/stable/c/638fa20b618b2bbcf86da71231624cc82121a036\nhttps://git.kernel.org/stable/c/7bc9e7f70bc57d8f02ffea2a42094281effb15ef\nhttps://git.kernel.org/stable/c/3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2\nhttps://git.kernel.org/stable/c/4919d82f7041157a421ca9bf39a78551d5ad8a1b\nhttps://www.cve.org/CVERecord?id=CVE-2022-49620\nhttps://lore.kernel.org/linux-cve-announce/2025022615-CVE-2022-49620-dca0@gregkh/\nhttps://git.kernel.org/linus/00aff3590fc0a73bddd3b743863c14e76fd35c0c\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.324\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.289\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.253\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.207\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.132\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.56\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2022-49620\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2022-49620\n\n\u0414\u043b\u044f Ubuntu:\nhttps://ubuntu.com/security/CVE-2022-49620",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "29.06.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "25.02.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "25.02.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-02229",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-49620",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu, Debian GNU/Linux, Red Hat Enterprise Linux, Linux",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Canonical Ltd. Ubuntu 16.04 LTS , Canonical Ltd. Ubuntu 18.04 LTS , Canonical Ltd. Ubuntu 20.04 LTS , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , Canonical Ltd. Ubuntu 22.04 LTS , Red Hat, Inc. Red Hat Enterprise Linux 9 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.16 \u0434\u043e 5.18.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.5 \u0434\u043e 5.10.131 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 5.11 \u0434\u043e 5.15.55 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.10 \u0434\u043e 4.14.288 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.15 \u0434\u043e 4.19.252 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 4.20 \u0434\u043e 5.4.206 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux \u043e\u0442 3.18 \u0434\u043e 4.9.323 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 tipc_sk_create() \u043c\u043e\u0434\u0443\u043b\u044f net/tipc/socket.c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 TIPC \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0435\u0433\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f (CWE-664), \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0447\u0435\u0442\u0447\u0438\u043a\u0430 \u0441\u0441\u044b\u043b\u043e\u043a (CWE-911)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 tipc_sk_create() \u043c\u043e\u0434\u0443\u043b\u044f net/tipc/socket.c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 TIPC \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0447\u0435\u0442\u0447\u0438\u043a\u0430 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438, \u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://git.kernel.org/stable/c/efa78f2ae363428525fb4981bb63c555ee79f3c7\nhttps://git.kernel.org/stable/c/ef488669b2652bde5b6ee5a409a5b048a2a50db4\nhttps://git.kernel.org/stable/c/833ecd0eae76eadf81d6d747bb5bc992d1151867\nhttps://git.kernel.org/stable/c/638fa20b618b2bbcf86da71231624cc82121a036\nhttps://git.kernel.org/stable/c/7bc9e7f70bc57d8f02ffea2a42094281effb15ef\nhttps://git.kernel.org/stable/c/3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2\nhttps://git.kernel.org/stable/c/4919d82f7041157a421ca9bf39a78551d5ad8a1b\nhttps://www.cve.org/CVERecord?id=CVE-2022-49620\nhttps://lore.kernel.org/linux-cve-announce/2025022615-CVE-2022-49620-dca0@gregkh/\nhttps://git.kernel.org/linus/00aff3590fc0a73bddd3b743863c14e76fd35c0c\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.324\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.289\nhttps://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.253\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.207\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.132\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.56\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13\nhttps://security-tracker.debian.org/tracker/CVE-2022-49620\nhttps://access.redhat.com/security/cve/cve-2022-49620\nhttps://ubuntu.com/security/CVE-2022-49620",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-664, CWE-911",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}

CVE-2022-49620 (GCVE-0-2022-49620)

Vulnerability from cvelistv5 – Published: 2025-02-26 02:23 – Updated: 2026-05-11 19:03

Title

net: tipc: fix possible refcount leak in tipc_sk_create()

Summary

In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix possible refcount leak in tipc_sk_create() Free sk in case tipc_sk_insert() fails.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-10-01 19:34 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/638fa20b618b2bbcf…
https://git.kernel.org/stable/c/7bc9e7f70bc57d8f0…
https://git.kernel.org/stable/c/ef488669b2652bde5…
https://git.kernel.org/stable/c/4919d82f7041157a4…
https://git.kernel.org/stable/c/efa78f2ae36342852…
https://git.kernel.org/stable/c/833ecd0eae76eadf8…
https://git.kernel.org/stable/c/3b2957fc09fe1ac7f…
https://git.kernel.org/stable/c/00aff3590fc0a73bd…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 5b8fa7ce823a59a328e0a7661df2478bfb745de4 , < 638fa20b618b2bbcf86da71231624cc82121a036 (git) Affected: 5b8fa7ce823a59a328e0a7661df2478bfb745de4 , < 7bc9e7f70bc57d8f02ffea2a42094281effb15ef (git) Affected: 5b8fa7ce823a59a328e0a7661df2478bfb745de4 , < ef488669b2652bde5b6ee5a409a5b048a2a50db4 (git) Affected: 5b8fa7ce823a59a328e0a7661df2478bfb745de4 , < 4919d82f7041157a421ca9bf39a78551d5ad8a1b (git) Affected: 5b8fa7ce823a59a328e0a7661df2478bfb745de4 , < efa78f2ae363428525fb4981bb63c555ee79f3c7 (git) Affected: 5b8fa7ce823a59a328e0a7661df2478bfb745de4 , < 833ecd0eae76eadf81d6d747bb5bc992d1151867 (git) Affected: 5b8fa7ce823a59a328e0a7661df2478bfb745de4 , < 3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2 (git) Affected: 5b8fa7ce823a59a328e0a7661df2478bfb745de4 , < 00aff3590fc0a73bddd3b743863c14e76fd35c0c (git)
Linux	Linux	Affected: 3.18 Unaffected: 0 , < 3.18 (semver) Unaffected: 4.9.324 , ≤ 4.9.* (semver) Unaffected: 4.14.289 , ≤ 4.14.* (semver) Unaffected: 4.19.253 , ≤ 4.19.* (semver) Unaffected: 5.4.207 , ≤ 5.4.* (semver) Unaffected: 5.10.132 , ≤ 5.10.* (semver) Unaffected: 5.15.56 , ≤ 5.15.* (semver) Unaffected: 5.18.13 , ≤ 5.18.* (semver) Unaffected: 5.19 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-49620",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T19:34:41.859918Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T19:36:50.833Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/tipc/socket.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "638fa20b618b2bbcf86da71231624cc82121a036",
              "status": "affected",
              "version": "5b8fa7ce823a59a328e0a7661df2478bfb745de4",
              "versionType": "git"
            },
            {
              "lessThan": "7bc9e7f70bc57d8f02ffea2a42094281effb15ef",
              "status": "affected",
              "version": "5b8fa7ce823a59a328e0a7661df2478bfb745de4",
              "versionType": "git"
            },
            {
              "lessThan": "ef488669b2652bde5b6ee5a409a5b048a2a50db4",
              "status": "affected",
              "version": "5b8fa7ce823a59a328e0a7661df2478bfb745de4",
              "versionType": "git"
            },
            {
              "lessThan": "4919d82f7041157a421ca9bf39a78551d5ad8a1b",
              "status": "affected",
              "version": "5b8fa7ce823a59a328e0a7661df2478bfb745de4",
              "versionType": "git"
            },
            {
              "lessThan": "efa78f2ae363428525fb4981bb63c555ee79f3c7",
              "status": "affected",
              "version": "5b8fa7ce823a59a328e0a7661df2478bfb745de4",
              "versionType": "git"
            },
            {
              "lessThan": "833ecd0eae76eadf81d6d747bb5bc992d1151867",
              "status": "affected",
              "version": "5b8fa7ce823a59a328e0a7661df2478bfb745de4",
              "versionType": "git"
            },
            {
              "lessThan": "3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2",
              "status": "affected",
              "version": "5b8fa7ce823a59a328e0a7661df2478bfb745de4",
              "versionType": "git"
            },
            {
              "lessThan": "00aff3590fc0a73bddd3b743863c14e76fd35c0c",
              "status": "affected",
              "version": "5b8fa7ce823a59a328e0a7661df2478bfb745de4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/tipc/socket.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.18"
            },
            {
              "lessThan": "3.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.324",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.289",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.207",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.132",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.56",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.324",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.289",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.253",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.207",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.132",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.56",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.13",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "3.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tipc: fix possible refcount leak in tipc_sk_create()\n\nFree sk in case tipc_sk_insert() fails."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:03:27.273Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/638fa20b618b2bbcf86da71231624cc82121a036"
        },
        {
          "url": "https://git.kernel.org/stable/c/7bc9e7f70bc57d8f02ffea2a42094281effb15ef"
        },
        {
          "url": "https://git.kernel.org/stable/c/ef488669b2652bde5b6ee5a409a5b048a2a50db4"
        },
        {
          "url": "https://git.kernel.org/stable/c/4919d82f7041157a421ca9bf39a78551d5ad8a1b"
        },
        {
          "url": "https://git.kernel.org/stable/c/efa78f2ae363428525fb4981bb63c555ee79f3c7"
        },
        {
          "url": "https://git.kernel.org/stable/c/833ecd0eae76eadf81d6d747bb5bc992d1151867"
        },
        {
          "url": "https://git.kernel.org/stable/c/3b2957fc09fe1ac7f07f40dd50dd5f93e3f3a7a2"
        },
        {
          "url": "https://git.kernel.org/stable/c/00aff3590fc0a73bddd3b743863c14e76fd35c0c"
        }
      ],
      "title": "net: tipc: fix possible refcount leak in tipc_sk_create()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49620",
    "datePublished": "2025-02-26T02:23:38.369Z",
    "dateReserved": "2025-02-26T02:21:30.420Z",
    "dateUpdated": "2026-05-11T19:03:27.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.