CVE-2022-49586

Summary

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_fastopen.

While reading sysctl_tcp_fastopen, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 03da610696a32578fc4f986479341ce9d430df08affected
LinuxLinux2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 25d53d858a6c0b89a6e69e376c2a57c4f4c2c8ccaffected
LinuxLinux2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 22938534c611136f35e2ca545bb668073ca5ef49affected
LinuxLinux2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 539d9ab79eba3974b479cad61a8688c41fe62e12affected
LinuxLinux2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 448ab998947996a0a451f8229f19087964cf2670affected
LinuxLinux2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 5a54213318c43f4009ae158347aa6016e3b9b55aaffected
LinuxLinux3.6affected
LinuxLinux0 < 3.6unaffected
LinuxLinux4.19.254 <= 4.19.*unaffected
LinuxLinux5.4.208 <= 5.4.*unaffected
LinuxLinux5.10.134 <= 5.10.*unaffected
LinuxLinux5.15.58 <= 5.15.*unaffected
LinuxLinux5.18.15 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References