CVE-2022-49344

Summary

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix a data-race in unix_dgram_peer_wake_me().

unix_dgram_poll() calls unix_dgram_peer_wake_me() without other's lock held and check if its receive queue is full. Here we need to use unix_recvq_full_lockless() instead of unix_recvq_full(), otherwise KCSAN will report a data-race.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7d267278a9ece963d77eefec61630223fce08c6c < 95f0ba806277733bf6024e23e27e1be773701ccaaffected
LinuxLinux7d267278a9ece963d77eefec61630223fce08c6c < 556720013c36c193d9cbfb06e7b33e51f0c39fbfaffected
LinuxLinux7d267278a9ece963d77eefec61630223fce08c6c < c61848500a3fd6867dfa4834b8c7f97133eceb9faffected
LinuxLinux7d267278a9ece963d77eefec61630223fce08c6c < c926ae58f24f7bd55aa2ea4add9f952032507913affected
LinuxLinux7d267278a9ece963d77eefec61630223fce08c6c < 71e8bfc7f838cabc60cba24e09ca84c4f8321ab2affected
LinuxLinux7d267278a9ece963d77eefec61630223fce08c6c < 8801eb3ccd2e4e3b1a01449383e3321ae6dbd9d6affected
LinuxLinux7d267278a9ece963d77eefec61630223fce08c6c < 662a80946ce13633ae90a55379f1346c10f0c432affected
LinuxLinux60bc010667ef06e0fb08d5ec599c0977adc2ac72affected
LinuxLinuxa3b0f6e8a21ef02f69a15abac440572d8cde8c2aaffected
LinuxLinuxec54d5ae9d298abf01c273233de9f2bc25d80475affected
LinuxLinuxda8db0830a2ce63f628150307a01a315f5081202affected
LinuxLinux9964b4c4ee925b2910723e509abd7241cff1ef84affected
LinuxLinux9d054f57adc981a5f503d5eb9b259aa450b90dc5affected
LinuxLinux72032798034d921ed565e3bf8dfdc3098f6473e2affected
LinuxLinux5c77e26862ce604edea05b3442ed765e9756fe0faffected
LinuxLinuxbad967fdd8ecbdd171f5f243657be033d2d081a7affected
LinuxLinux58a6a46a036ce81a2a8ecaa6fc1537c894349e3faffected
LinuxLinux2.6.32.70 < 2.6.33affected
LinuxLinux3.2.75 < 3.3affected
LinuxLinux3.4.111 < 3.5affected
LinuxLinux3.10.95 < 3.11affected
LinuxLinux3.12.52 < 3.13affected
LinuxLinux3.14.59 < 3.15affected
LinuxLinux3.18.26 < 3.19affected
LinuxLinux4.1.15 < 4.2affected
LinuxLinux4.2.8 < 4.3affected
LinuxLinux4.3.3 < 4.4affected
LinuxLinux4.4affected
LinuxLinux0 < 4.4unaffected
LinuxLinux4.19.247 <= 4.19.*unaffected
LinuxLinux5.4.198 <= 5.4.*unaffected
LinuxLinux5.10.122 <= 5.10.*unaffected
LinuxLinux5.15.47 <= 5.15.*unaffected
LinuxLinux5.17.15 <= 5.17.*unaffected
LinuxLinux5.18.4 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References