Signed Integer Overflow in Linux Kernel's IPv6 L2TP Protocol

CVE-2022-49727

Summary

The Linux kernel's implementation of the L2TP/IPV6 protocol is affected by a signed integer overflow vulnerability. This occurs when the length parameter is close to its maximum value combined with the size of the transmission header, which could lead to unexpected behavior. The fix involves adjusting the calculations similar to the UDPv6 protocol, thereby preventing potential overflows. Users are advised to upgrade to the latest version of the Linux kernel to mitigate the risk.

References