Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

CVE-2022-49066: Linux kernel veth driver can cause system crash

CVE-2022-49066 · published 1 year ago
Summary

The Linux kernel’s virtual Ethernet (veth) driver may crash when it receives certain network packets that lack the expected header data. This can happen on standard Linux installations, including Azure, AWS, and Ubuntu LTS versions. Updating the kernel to the latest release that includes the fix will prevent the crash.

What to do
  • Update canonical linux-azure to version 4.15.0-1146.161~14.04.1.
  • Update canonical linux-aws-hwe to version 4.15.0-1137.148~16.04.1.
  • Update canonical linux-azure to version 4.15.0-1146.161~16.04.1.
  • Update canonical linux-gcp to version 4.15.0-1131.147~16.04.1.
  • Update canonical linux-hwe to version 4.15.0-189.200~16.04.1.
  • Update canonical linux-oracle to version 4.15.0-1102.113~16.04.1.
  • Update canonical linux to version 4.15.0-189.200.
  • Update canonical linux-aws to version 4.15.0-1137.148.
  • Update canonical linux-aws-5.4 to version 5.4.0-1081.88~18.04.1.
  • Update canonical linux-azure-4.15 to version 4.15.0-1146.161.
  • Update canonical linux-azure-5.4 to version 5.4.0-1086.91~18.04.1.
  • Update canonical linux-gcp-4.15 to version 4.15.0-1131.147.
  • Update canonical linux-gcp-5.4 to version 5.4.0-1084.92~18.04.1.
  • Update canonical linux-hwe-5.4 to version 5.4.0-122.138~18.04.1.
  • Update canonical linux-ibm-5.4 to version 5.4.0-1029.33~18.04.1.
  • Update canonical linux-kvm to version 4.15.0-1123.128.
  • Update canonical linux-oracle to version 4.15.0-1102.113.
  • Update canonical linux-oracle-5.4 to version 5.4.0-1079.87~18.04.1.
  • Update canonical linux-raspi-5.4 to version 5.4.0-1066.76~18.04.1.
  • Update canonical linux-aws-fips to version 4.15.0-2076.81.
  • Update canonical linux-azure-fips to version 4.15.0-2057.63.
  • Update canonical linux-fips to version 4.15.0-1094.105.
  • Update canonical linux-gcp-fips to version 4.15.0-2041.46.
  • Update canonical linux to version 5.4.0-122.138.
  • Update canonical linux-aws to version 5.4.0-1081.88.
  • Update canonical linux-azure to version 5.4.0-1086.91.
  • Update canonical linux-azure-5.15 to version 5.15.0-1008.9~20.04.1.
  • Update canonical linux-bluefield to version 5.4.0-1042.47.
  • Update canonical linux-gcp to version 5.4.0-1084.92.
  • Update canonical linux-hwe-5.15 to version 5.15.0-41.44~20.04.1.
  • Update canonical linux-ibm to version 5.4.0-1029.33.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1008.11~20.04.1.
  • Update canonical linux-iot to version 5.4.0-1004.6.
  • Update canonical linux-kvm to version 5.4.0-1071.76.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-42.45~20.04.1.
  • Update canonical linux-oracle to version 5.4.0-1079.87.
  • Update canonical linux-raspi to version 5.4.0-1066.76.
  • Update canonical linux-aws-fips to version 5.4.0-1081.88+fips1.
  • Update canonical linux-azure-fips to version 5.4.0-1086.91+fips1.
  • Update canonical linux-fips to version 5.4.0-1057.65.
  • Update canonical linux-gcp-fips to version 5.4.0-1081.88+fips1.
  • Update canonical linux to version 5.15.0-37.39.
  • Update canonical linux-aws to version 5.15.0-1011.14.
  • Update canonical linux-azure to version 5.15.0-1010.12.
  • Update canonical linux-gcp to version 5.15.0-1008.12.
  • Update canonical linux-gke to version 5.15.0-1008.10.
  • Update canonical linux-ibm to version 5.15.0-1007.8.
  • Update canonical linux-intel-iotg to version 5.15.0-1008.11.
  • Update canonical linux-kvm to version 5.15.0-1010.11.
  • Update canonical linux-lowlatency to version 5.15.0-37.39.
  • Update canonical linux-oracle to version 5.15.0-1009.12.
  • Update canonical linux-raspi to version 5.15.0-1011.13.
  • Update canonical linux-realtime to version 5.15.0-1014.14.
  • Update debian linux to version 5.17.6-1.
  • Update linux kernel to version 5.17.4.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 2.6.24, < 4.9.311
>= 4.10, < 4.14.276
>= 4.15, < 4.19.239
>= 4.20, < 5.4.190
>= 5.5, < 5.10.112
>= 5.11, < 5.15.35
>= 5.16, < 5.17.4
5.18
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:Pro:14.04:LTS canonical linux-azure < 4.15.0-1146.161~14.04.1
Fix: upgrade to 4.15.0-1146.161~14.04.1
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe < 4.15.0-1137.148~16.04.1
Fix: upgrade to 4.15.0-1137.148~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-azure < 4.15.0-1146.161~16.04.1
Fix: upgrade to 4.15.0-1146.161~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-gcp < 4.15.0-1131.147~16.04.1
Fix: upgrade to 4.15.0-1131.147~16.04.1
Ubuntu:Pro:16.04:LTS canonical linux-hwe < 4.15.0-189.200~16.04.1
Fix: upgrade to 4.15.0-189.200~16.04.1
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle < 4.15.0-1102.113~16.04.1
Fix: upgrade to 4.15.0-1102.113~16.04.1
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:18.04:LTS canonical linux < 4.15.0-189.200
Fix: upgrade to 4.15.0-189.200
Ubuntu:18.04:LTS canonical linux-aws < 4.15.0-1137.148
Fix: upgrade to 4.15.0-1137.148
Ubuntu:18.04:LTS canonical linux-aws-5.4 < 5.4.0-1081.88~18.04.1
Fix: upgrade to 5.4.0-1081.88~18.04.1
Ubuntu:18.04:LTS canonical linux-azure-4.15 < 4.15.0-1146.161
Fix: upgrade to 4.15.0-1146.161
Ubuntu:18.04:LTS canonical linux-azure-5.4 < 5.4.0-1086.91~18.04.1
Fix: upgrade to 5.4.0-1086.91~18.04.1
Ubuntu:18.04:LTS canonical linux-gcp-4.15 < 4.15.0-1131.147
Fix: upgrade to 4.15.0-1131.147
Ubuntu:18.04:LTS canonical linux-gcp-5.4 < 5.4.0-1084.92~18.04.1
Fix: upgrade to 5.4.0-1084.92~18.04.1
Ubuntu:18.04:LTS canonical linux-hwe-5.4 < 5.4.0-122.138~18.04.1
Fix: upgrade to 5.4.0-122.138~18.04.1
Ubuntu:18.04:LTS canonical linux-ibm-5.4 < 5.4.0-1029.33~18.04.1
Fix: upgrade to 5.4.0-1029.33~18.04.1
Ubuntu:18.04:LTS canonical linux-kvm < 4.15.0-1123.128
Fix: upgrade to 4.15.0-1123.128
Ubuntu:18.04:LTS canonical linux-oracle < 4.15.0-1102.113
Fix: upgrade to 4.15.0-1102.113
Ubuntu:18.04:LTS canonical linux-oracle-5.4 < 5.4.0-1079.87~18.04.1
Fix: upgrade to 5.4.0-1079.87~18.04.1
Ubuntu:18.04:LTS canonical linux-raspi-5.4 < 5.4.0-1066.76~18.04.1
Fix: upgrade to 5.4.0-1066.76~18.04.1
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips < 4.15.0-2076.81
Fix: upgrade to 4.15.0-2076.81
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips < 4.15.0-2057.63
Fix: upgrade to 4.15.0-2057.63
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips < 4.15.0-1094.105
Fix: upgrade to 4.15.0-1094.105
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips < 4.15.0-2041.46
Fix: upgrade to 4.15.0-2041.46
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Showing 50 of 151. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux < 5.4.0-122.138
Fix: upgrade to 5.4.0-122.138
Ubuntu:20.04:LTS canonical linux-aws < 5.4.0-1081.88
Fix: upgrade to 5.4.0-1081.88
Ubuntu:20.04:LTS canonical linux-azure < 5.4.0-1086.91
Fix: upgrade to 5.4.0-1086.91
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1008.9~20.04.1
Fix: upgrade to 5.15.0-1008.9~20.04.1
Ubuntu:20.04:LTS canonical linux-bluefield < 5.4.0-1042.47
Fix: upgrade to 5.4.0-1042.47
Ubuntu:20.04:LTS canonical linux-gcp < 5.4.0-1084.92
Fix: upgrade to 5.4.0-1084.92
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-41.44~20.04.1
Fix: upgrade to 5.15.0-41.44~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm < 5.4.0-1029.33
Fix: upgrade to 5.4.0-1029.33
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1008.11~20.04.1
Fix: upgrade to 5.15.0-1008.11~20.04.1
Ubuntu:20.04:LTS canonical linux-iot < 5.4.0-1004.6
Fix: upgrade to 5.4.0-1004.6
Ubuntu:20.04:LTS canonical linux-kvm < 5.4.0-1071.76
Fix: upgrade to 5.4.0-1071.76
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-42.45~20.04.1
Fix: upgrade to 5.15.0-42.45~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle < 5.4.0-1079.87
Fix: upgrade to 5.4.0-1079.87
Ubuntu:20.04:LTS canonical linux-raspi < 5.4.0-1066.76
Fix: upgrade to 5.4.0-1066.76
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips < 5.4.0-1081.88+fips1
Fix: upgrade to 5.4.0-1081.88+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips < 5.4.0-1086.91+fips1
Fix: upgrade to 5.4.0-1086.91+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips < 5.4.0-1057.65
Fix: upgrade to 5.4.0-1057.65
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips < 5.4.0-1081.88+fips1
Fix: upgrade to 5.4.0-1081.88+fips1
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-37.39
Fix: upgrade to 5.15.0-37.39
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1011.14
Fix: upgrade to 5.15.0-1011.14
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1010.12
Fix: upgrade to 5.15.0-1010.12
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1008.12
Fix: upgrade to 5.15.0-1008.12
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1008.10
Fix: upgrade to 5.15.0-1008.10
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1007.8
Fix: upgrade to 5.15.0-1007.8
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1008.11
Fix: upgrade to 5.15.0-1008.11
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1010.11
Fix: upgrade to 5.15.0-1010.11
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-37.39
Fix: upgrade to 5.15.0-37.39
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1009.12
Fix: upgrade to 5.15.0-1009.12
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1011.13
Fix: upgrade to 5.15.0-1011.13
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1014.14
Fix: upgrade to 5.15.0-1014.14
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:26.04 canonical linux-nvidia All versions
Debian:12 debian linux < 5.17.6-1
Fix: upgrade to 5.17.6-1
Linux linux kernel >= 5.16.0, < 5.17.4
Fix: upgrade to 5.17.4
Original advisory text
veth: Ensure eth header is in skb's linear part
In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part After feeding a decapsulated packet to a veth device with act_mirred, skb_headlen() may be 0. But veth_xmit() calls __dev_forward_skb(), which expects at least ETH_HLEN byte of linear data (as __dev_forward_skb2() calls eth_type_trans(), which pulls ETH_HLEN bytes unconditionally). Use pskb_may_pull() to ensure veth_xmit() respects this constraint. kernel BUG at include/linux/skbuff.h:2328! RIP: 0010:eth_type_trans+0xcf/0x140 Call Trace: <IRQ> __dev_forward_skb2+0xe3/0x160 veth_xmit+0x6e/0x250 [veth] dev_hard_start_xmit+0xc7/0x200 __dev_queue_xmit+0x47f/0x520 ? skb_ensure_writable+0x85/0xa0 ? skb_mpls_pop+0x98/0x1c0 tcf_mirred_act+0x442/0x47e [act_mirred] tcf_action_exec+0x86/0x140 fl_classify+0x1d8/0x1e0 [cls_flower] ? dma_pte_clear_level+0x129/0x1a0 ? dma_pte_clear_level+0x129/0x1a0 ? prb_fill_curr_block+0x2f/0xc0 ? skb_copy_bits+0x11a/0x220 __tcf_classify+0x58/0x110 tcf_classify_ingress+0x6b/0x140 __netif_receive_skb_core.constprop.0+0x47d/0xfd0 ? __iommu_dma_unmap_swiotlb+0x44/0x90 __netif_receive_skb_one_core+0x3d/0xa0 netif_receive_skb+0x116/0x170 be_process_rx+0x22f/0x330 [be2net] be_poll+0x13c/0x370 [be2net] __napi_poll+0x2a/0x170 net_rx_action+0x22f/0x2f0 __do_softirq+0xca/0x2a8 __irq_exit_rcu+0xc1/0xe0 common_interrupt+0x83/0xa0
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published26 Feb 2025
Updated3 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta