CVE-2022-26125: 
Rocky Linux vulnerability analysis and mitigation

CVE-2022-26125 is a buffer overflow vulnerability discovered in FRRouting through version 8.1.0. The vulnerability stems from incorrect checks on input packet length in the isisd/isis_tlvs.c file. This security flaw was identified on February 25, 2022, and affects the FRRouting suite, which manages TCP/IP-based routing protocols (NVD, Debian Security).

The vulnerability exists in the unpack_tlv_router_cap function within isisd/isis_tlvs.c. The issue arises from a loop condition where subtlv_len > 2 and subtlv_len is updated at the end of the loop. When subtlv_len < length + 2, integer overflow can occur, potentially leading to heap overflows in subsequent loop iterations. The vulnerability is particularly concerning as subtlv_len and length are of uint8_t type, making overflow scenarios more likely. The CVSS v3.1 base score is 7.8 (High) with the vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (GitHub Issue, NVD).

The buffer overflow vulnerability can lead to heap overflows, potentially resulting in remote code execution, system crashes, or information disclosure. The high CVSS score reflects the significant impact on system confidentiality, integrity, and availability when successfully exploited (NVD, Debian Security).

The vulnerability requires local access and user interaction for exploitation. The technical nature of the overflow condition makes it exploitable through carefully crafted input packets that can trigger the integer overflow condition in the affected code path (NVD).

Multiple vendors have released patches to address this vulnerability. Debian has fixed the issue in version 7.5.1-1.1+deb10u2 for Debian 10 (Buster). Red Hat has addressed the vulnerability in frr version 8.2.2-4.el9. Users are strongly advised to upgrade their FRRouting installations to the latest patched versions (Debian Security, Red Hat).