CVE-2022-49629

Summary

In the Linux kernel, the following vulnerability has been resolved:

nexthop: Fix data-races around nexthop_compat_mode.

While reading nexthop_compat_mode, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4f80116d3df3b23ee4b83ea8557629e1799bc230 < a51040d4b120f3520df64fb0b9c63b31d69bea9baffected
LinuxLinux4f80116d3df3b23ee4b83ea8557629e1799bc230 < 0d17723afea3ae8c9f245c9bbd2ba5945b77e812affected
LinuxLinux4f80116d3df3b23ee4b83ea8557629e1799bc230 < ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fdaffected
LinuxLinux4f80116d3df3b23ee4b83ea8557629e1799bc230 < bdf00bf24bef9be1ca641a6390fd5487873e0d2eaffected
LinuxLinux5.8affected
LinuxLinux0 < 5.8unaffected
LinuxLinux5.10.132 <= 5.10.*unaffected
LinuxLinux5.15.56 <= 5.15.*unaffected
LinuxLinux5.18.13 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References