CVE-2022-49973: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49973 affects the Linux kernel and involves a vulnerability in the skmsg subsystem, specifically in the skmsgrecvmsg() function. The issue was discovered when a kernel NULL pointer dereference was identified in the TCP BPF message handling code path (NVD, Wiz).

The vulnerability stems from an incorrect last scatter-gather (sg) check in skmsgrecvmsg(). In sockmap redirection cases without streamparser/streamverdict/skbverdict, the end of the scatterlist was not properly marked. The issue affects several kernel functions including skmsgalloc, skmsgpageadd, and bpfmsgpush_data, which do not mark the end of sg and instead rely on sg.end for end judgment (NVD).

When exploited, this vulnerability can lead to a kernel NULL pointer dereference, which typically results in a system crash or denial of service condition. The issue affects the kernel's networking stack, specifically the TCP BPF message handling functionality (Wiz).

The issue has been resolved by adding back the judgment of '(i != msg_rx->sg.end)' in the affected code. This fix ensures proper handling of the scatter-gather list end marker in the sockmap redirection case (NVD).