QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-49727

Back to search

CVE-2022-49727

Published: Feb 26, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg When len >= INT_MAX - transhdrlen, ulen = len + transhdrlen will be overflow. To fix, we can follow what udpv6 does and subtract the transhdrlen from the max.

VendorProductVersions

Linux

Linux

affected
a32e0eec7042b21ccb52896cf715e3e2641fed93 - < 2cf73c7cb6125083408d77f43d0e84d86aed0000
affected
a32e0eec7042b21ccb52896cf715e3e2641fed93 - < 0e818d433fc2718fe4da044ffca7431812a7e04e
affected
a32e0eec7042b21ccb52896cf715e3e2641fed93 - < 6c4e3486d21173d60925ef52e512cae727b43d30
affected
a32e0eec7042b21ccb52896cf715e3e2641fed93 - < 2f42389d270f2304c8855b0b63498a5a4d0c053d
affected
a32e0eec7042b21ccb52896cf715e3e2641fed93 - < b8879ca1fd7348b4d5db7db86dcb97f60c73d751

+3 more versions

Linux

Linux

affected
3.5
unaffected
0 - < 3.5
unaffected
4.9.320 - <= 4.9.*
unaffected
4.14.285 - <= 4.14.*
unaffected
4.19.249 - <= 4.19.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now