CVE-2022-49917

ipvs: fix WARNING in ip_vs_app_net_cleanup()

HIGH
7.8
CVSS Score
Published: May 1, 2025 at 02:10 PM UTC
Updated: June 17, 2026 at 05:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ip_vs_app_net_cleanup() During the initialization of ip_vs_app_net_init(), if file ip_vs_app fails to be created, the initialization is successful by default. Therefore, the ip_vs_app file doesn't be found during the remove in ip_vs_app_net_cleanup(). It will cause WRNING. The following is the stack information: name 'ip_vs_app' WARNING: CPU: 1 PID: 9 at fs/proc/generic.c:712 remove_proc_entry+0x389/0x460 Modules linked in: Workqueue: netns cleanup_net RIP: 0010:remove_proc_entry+0x389/0x460 Call Trace: <TASK> ops_exit_list+0x125/0x170 cleanup_net+0x4ea/0xb00 process_one_work+0x9bf/0x1710 worker_thread+0x665/0x1080 kthread+0x2e4/0x3a0 ret_from_fork+0x1f/0x30 </TASK>

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.24 ≤ v < 4.19.2652.6.24 ≤ v < 5.10.1542.6.24 ≤ v < 5.15.782.6.24 ≤ v < 5.4.2242.6.24 ≤ v < 6.0.82.6.24 ≤ v < 6.14.20 ≤ v < 5.4.2245.11 ≤ v < 5.15.785.16 ≤ v < 6.0.85.5 ≤ v < 5.10.1542.6.24457c4cbc5a3dde259d2a1f15d5f97852903972676.1 rc16.1 rc26.1 rc3
Vendor states this is fixed in 06d7596d18725f1a93cf817662d36050e5afb989 (fixed)
Vendor states this is fixed in 2c8d81bdb2684d53d6cedad7410ba4cf9090e343 (fixed)
Vendor states this is fixed in 5663ed63adb9619c98ab7479aa4606fa9b7a548c (fixed)
Vendor states this is fixed in 8457a00c981fe1a799ce34123908856b0f5973b8 (fixed)
Vendor states this is fixed in 97f872b00937f2689bff2dab4ad9ed259482840f (fixed)
Vendor states this is fixed in adc76740ccd52e4a1d910767cd1223e134a7078b (fixed)
Vendor states this is fixed in 2.6.24 (unaffected)
Vendor states this is fixed in 4.19.265 (unaffected)
Vendor states this is fixed in 5.10.154 (unaffected)
Vendor states this is fixed in 5.15.78 (unaffected)
Vendor states this is fixed in 5.4.224 (unaffected)
Vendor states this is fixed in 6.0.8 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)

References (6)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/06d7596d18725f1a93cf817662d36050e5afb989
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2c8d81bdb2684d53d6cedad7410ba4cf9090e343
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5663ed63adb9619c98ab7479aa4606fa9b7a548c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/8457a00c981fe1a799ce34123908856b0f5973b8
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/97f872b00937f2689bff2dab4ad9ed259482840f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/adc76740ccd52e4a1d910767cd1223e134a7078b

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card