CVE-2022-49234 net: dsa: Avoid cross-chip syncing of VLAN filtering
A Linux kernel DSA driver flaw causes out-of-bounds accesses and crashes when VLAN filtering is synced across chips with mismatched port counts.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-49234?
CVE-2022-49234 is a high-severity vulnerability in Linux kernel, published on 26 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: Avoid cross-chip syncing of VLAN filtering
Changes to VLAN filtering are not applicable to cross-chip notifications.
On a system like this:
.-----. .-----. .-----. | sw1 +---+ sw2 +---+ sw3 | '-1-2-' '-1-2-' '-1-2-'
Before this change, upon sw1p1 leaving a bridge, a call to dsa_port_vlan_filtering would also be made to sw2p1 and sw3p1.
In this scenario:
.---------. .-----. .-----. | sw1 +---+ sw2 +---+ sw3 | '-1-2-3-4-' '-1-2-' '-1-2-'
When sw1p4 would leave a bridge, dsa_port_vlan_filtering would be called for sw2 and sw3 with a non-existing port - leading to array out-of-bounds accesses and crashes on mv88e6xxx.
Weakness: CWE-125
Which versions are affected by CVE-2022-49234?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-49234?
Apply the vendor's patch.
Is CVE-2022-49234 being exploited?
There is no known exploitation of CVE-2022-49234 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-67623, DEBIAN-CVE-2022-49234, GHSA-h26x-h787-c9cr, ROOT-OS-DEBIAN-11-CVE-2022-49234, ROOT-OS-UBUNTU-2204-CVE-2022-49234, UBUNTU-CVE-2022-49234.