CVE-2022-49664

Summary

CVE-2022-49664 is a Linux kernel vulnerability that resulted in a NULL pointer dereference crash. The issue was discovered in the tipc subsystem and was caused by a gap between creating a node in tipc_node_create() and creating its corresponding bc link. If a bc packet arrived during this gap and tried to access the bc link of the newly created node, it would encounter a NULL pointer. This issue has been resolved by moving the bc link creation before the node is inserted into the hashtable. For a node to become fully realized in the system, the bc link must be created before it's rehashed. This vulnerability could lead to system instability or even arbitrary code execution if exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.