NVD

CVE-2022-49690 Detail

Rejected

This CVE has been marked Rejected in the CVE List. These CVEs are stored in the NVD, but do not show up in search results by default.

Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)

Weakness Enumeration

CWE-ID	CWE Name	Source

Change History

3 change records found show changes

CVE Modified by kernel.org 2/26/2025 10:15:17 AM

Action	Type	Old Value	New Value
Changed	Description	In the Linux kernel, the following vulnerability has been resolved: net/tls: fix tls_sk_proto_close executed repeatedly After setting the sock ktls, update ctx->sk_proto to sock->sk_prot by tls_update(), so now ctx->sk_proto->close is tls_sk_proto_close(). When close the sock, tls_sk_proto_close() is called for sock->sk_prot->close is tls_sk_proto_close(). But ctx->sk_proto->close() will be executed later in tls_sk_proto_close(). Thus tls_sk_proto_close() executed repeatedly occurred. That will trigger the following bug. ================================================================= KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] RIP: 0010:tls_sk_proto_close+0xd8/0xaf0 net/tls/tls_main.c:306 Call Trace: <TASK> tls_sk_proto_close+0x356/0xaf0 net/tls/tls_main.c:329 inet_release+0x12e/0x280 net/ipv4/af_inet.c:428 __sock_release+0xcd/0x280 net/socket.c:650 sock_close+0x18/0x20 net/socket.c:1365 Updating a proto which is same with sock->sk_prot is incorrect. Add proto and sock->sk_prot equality check at the head of tls_update() to fix it.	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/05c6c36c79311d9a00a79f88647f83a7cf009624
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/69135c572d1f84261a6de2a1268513a7e71753e2
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/9b95ee8990d9b4b6086c309632b9d0d576833abe
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/be64f54a0db2dbf399f3bca45458d06c833641f0
Removed	Reference	kernel.org: https://git.kernel.org/stable/c/e82376b632473790781a182b10823a4b5dbf6606

New CVE Received from kernel.org 2/26/2025 2:01:43 AM

Action	Type	New Value
Added	Description	In the Linux kernel, the following vulnerability has been resolved: net/tls: fix tls_sk_proto_close executed repeatedly After setting the sock ktls, update ctx->sk_proto to sock->sk_prot by tls_update(), so now ctx->sk_proto->close is tls_sk_proto_close(). When close the sock, tls_sk_proto_close() is called for sock->sk_prot->close is tls_sk_proto_close(). But ctx->sk_proto->close() will be executed later in tls_sk_proto_close(). Thus tls_sk_proto_close() executed repeatedly occurred. That will trigger the following bug. ================================================================= KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] RIP: 0010:tls_sk_proto_close+0xd8/0xaf0 net/tls/tls_main.c:306 Call Trace: <TASK> tls_sk_proto_close+0x356/0xaf0 net/tls/tls_main.c:329 inet_release+0x12e/0x280 net/ipv4/af_inet.c:428 __sock_release+0xcd/0x280 net/socket.c:650 sock_close+0x18/0x20 net/socket.c:1365 Updating a proto which is same with sock->sk_prot is incorrect. Add proto and sock->sk_prot equality check at the head of tls_update() to fix it.
Added	Reference	https://git.kernel.org/stable/c/05c6c36c79311d9a00a79f88647f83a7cf009624
Added	Reference	https://git.kernel.org/stable/c/69135c572d1f84261a6de2a1268513a7e71753e2
Added	Reference	https://git.kernel.org/stable/c/9b95ee8990d9b4b6086c309632b9d0d576833abe
Added	Reference	https://git.kernel.org/stable/c/be64f54a0db2dbf399f3bca45458d06c833641f0
Added	Reference	https://git.kernel.org/stable/c/e82376b632473790781a182b10823a4b5dbf6606

Quick Info

CVE Dictionary Entry:
CVE-2022-49690
NVD Published Date:
02/26/2025
NVD Last Modified:
02/26/2025
Source:
kernel.org

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2022-49690 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Change History

CVE Modified by kernel.org 2/26/2025 10:15:17 AM

CVE Rejected by kernel.org 2/26/2025 10:15:17 AM

New CVE Received from kernel.org 2/26/2025 2:01:43 AM

Quick Info