CVE-2022-49903

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix WARNING in ip6_route_net_exit_late() During the initialization of ip6_route_net_init_late(), if file ipv6_route or rt6_stats fails to be created, the initialization is successful by default. Therefore, the ipv6_route or rt6_stats file doesn't be found during the remove in ip6_route_net_exit_late(). It will cause WRNING. The following is the stack information: name 'rt6_stats' WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:712 remove_proc_entry+0x389/0x460 Modules linked in: Workqueue: netns cleanup_net RIP: 0010:remove_proc_entry+0x389/0x460 PKRU: 55555554 Call Trace: <TASK> ops_exit_list+0xb0/0x170 cleanup_net+0x4ea/0xb00 process_one_work+0x9bf/0x1710 worker_thread+0x665/0x1080 kthread+0x2e4/0x3a0 ret_from_fork+0x1f/0x30 </TASK>

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedMay 1, 2025
First seenMay 1, 2025

How to fix

Update
  • linux linux_kernel4.19.265, 5.4.224, 5.10.154, 5.15.78, 6.0.8 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel2.6.26 ≤ v < 4.19.265, 4.20 ≤ v < 5.4.224, 5.5 ≤ v < 5.10.154, 5.11 ≤ v < 5.15.78, 5.16 ≤ v < 6.0.8, 6.14.19.265, 5.4.224, 5.10.154, 5.15.78, 6.0.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.