CVE-2022-50865
- Source
- https://cve.org/CVERecord?id=CVE-2022-50865
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50865.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2022-50865
- Downstream
- Related
- Published
- 2025-12-30T12:15:37.150Z
- Modified
- 2026-03-12T03:26:57.194647Z
- Summary
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
tcp: fix a signed-integer-overflow bug in tcpaddbacklog()
The type of skrcvbuf and sksndbuf in struct sock is int, and in tcpaddbacklog(), the variable limit is caculated by adding skrcvbuf, sksndbuf and 64 * 1024, it may exceed the max value of int and overflow. This patch reduces the limit budget by halving the sndbuf to solve this issue since ACK packets are much smaller than the payload.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50865.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/28addf029417d53b1df062b4c87feb7bc033cb5f
- https://git.kernel.org/stable/c/4f23cb2be530785db284a685d1b1c30224d8a538
- https://git.kernel.org/stable/c/9d04b4d0feee12bce6bfe37f30d8e953d3c30368
- https://git.kernel.org/stable/c/a85d39f14aa8a71e29cfb5eb5de02878a8779898
- https://git.kernel.org/stable/c/ec791d8149ff60c40ad2074af3b92a39c916a03f
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50865.json
- https://nvd.nist.gov/vuln/detail/CVE-2022-50865
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc9c3321257e1b95be9b375f811fb250162af8d39Fixed9d04b4d0feee12bce6bfe37f30d8e953d3c30368Fixed4f23cb2be530785db284a685d1b1c30224d8a538Fixeda85d39f14aa8a71e29cfb5eb5de02878a8779898Fixed28addf029417d53b1df062b4c87feb7bc033cb5fFixedec791d8149ff60c40ad2074af3b92a39c916a03f