CVE-2022-49596

Summary

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_min_snd_mss.

While reading sysctl_tcp_min_snd_mss, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux5f3e2bf008c2221478101ee72f5cb4654b9fc363 < fdb96b69f5909ffcdd6f1e0902219fc6d7689ff7affected
LinuxLinux5f3e2bf008c2221478101ee72f5cb4654b9fc363 < 97992e8feff33b3ae154a113ec398546bbacda80affected
LinuxLinux5f3e2bf008c2221478101ee72f5cb4654b9fc363 < 0fc9357282df055e30990b29f4b7afa53ab42cdbaffected
LinuxLinux5f3e2bf008c2221478101ee72f5cb4654b9fc363 < 0d8a39feb58910a7f7746b1770ee5578cc551fe6affected
LinuxLinux5f3e2bf008c2221478101ee72f5cb4654b9fc363 < 78eb166cdefcc3221c8c7c1e2d514e91a2eb5014affected
LinuxLinux6b7e7997ad3505db7de85ff12276fc84659481d3affected
LinuxLinuxe757d052f3b8ce739d068a1e890643376c16b7a9affected
LinuxLinux8e39cbc03dafa3731d22533f869bf326c0e6e6f8affected
LinuxLinuxcd6f35b8421ff20365ff711c0ac7647fd70e9af7affected
LinuxLinux7f9f8a37e563c67b24ccd57da1d541a95538e8d9affected
LinuxLinux2efabe3e1491f10bf3cf82ae1a371755ba054a1baffected
LinuxLinux3.16.69 < 3.17affected
LinuxLinux4.4.182 < 4.5affected
LinuxLinux4.9.182 < 4.10affected
LinuxLinux4.14.127 < 4.15affected
LinuxLinux4.19.52 < 4.20affected
LinuxLinux5.1.11 < 5.2affected
LinuxLinux5.2affected
LinuxLinux0 < 5.2unaffected
LinuxLinux5.4.208 <= 5.4.*unaffected
LinuxLinux5.10.134 <= 5.10.*unaffected
LinuxLinux5.15.58 <= 5.15.*unaffected
LinuxLinux5.18.15 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References