CVE-2022-49649

Summary

CVE-2022-49649 is a vulnerability affecting the Linux kernel's xen/netback module. The issue lies in the function xenvif_rx_skb(), which is expecting the rx queue not to be empty before entering. However, if the loop in xenvif_rx_action() performs multiple iterations, the availability of another skb in the rx queue is not checked, leading to a null pointer dereference and subsequent system crash. This vulnerability can result in denial-of-service attacks, causing the affected system to crash. The issue has been resolved by stopping the loop in case the rx queue becomes empty.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.