CVE-2022-49663: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49663 affects the Linux kernel and involves a vulnerability in the tunnels subsystem. The issue was discovered when debug code added in commit f9aefd6b2aa3 caught a bug in the skb_tunnel_check_pmtu() function. The vulnerability stems from incorrectly assuming that the mac header is set in certain network packet processing paths (Kernel Commit).

The vulnerability exists in the skb_tunnel_check_pmtu() function where it incorrectly uses skb->mac_header when it should be using skb->data in ndo_start_xmit() paths. The bug manifests when processing network packets in tunnel interfaces, specifically during Path MTU (Maximum Transmission Unit) discovery operations. The issue was detected through a warning message in the kernel log indicating an invalid mac header access (Kernel Commit).

When triggered, the vulnerability can cause kernel warnings and potential system instability. The issue affects the network packet processing path, particularly in tunnel interfaces, which could impact network performance and reliability (Kernel Commit).

The issue has been fixed by modifying the skb_tunnel_check_pmtu() function to use skb_network_offset() instead of skb_mac_header_len(). The fix was implemented in the Linux kernel and backported to various stable kernel versions (Kernel Commit).