CVE-2022-49603

Summary

In the Linux kernel, the following vulnerability has been resolved:

ip: Fix data-races around sysctl_ip_fwd_update_priority.

While reading sysctl_ip_fwd_update_priority, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux432e05d328921c68c35bfdeff7d7b7400b8e3d1a < 11038fa781ab916535c53351537b22d6d405667daffected
LinuxLinux432e05d328921c68c35bfdeff7d7b7400b8e3d1a < 351f81f7d7185d18a9ff76f8f8c2fa8c4eea563baffected
LinuxLinux432e05d328921c68c35bfdeff7d7b7400b8e3d1a < bcc03369d3277ae075ed421f0c8bf4adb5e65b74affected
LinuxLinux432e05d328921c68c35bfdeff7d7b7400b8e3d1a < 7bf9e18d9a5e99e3c83482973557e9f047b051e7affected
LinuxLinux4.19affected
LinuxLinux0 < 4.19unaffected
LinuxLinux5.10.134 <= 5.10.*unaffected
LinuxLinux5.15.58 <= 5.15.*unaffected
LinuxLinux5.18.15 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References