CVE-2022-49198
kernel: mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 26, 2025
Updated · June 30, 2026
Description
A vulnerability in the Linux kernel's Multipath TCP (MPTCP) implementation can lead to a system crash under specific conditions. The issue arises from improper memory handling during the allocation and release of socket buffers (skb) in the __mptcp_alloc_tx_skb function.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-416 · Use After Free