Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-49576

ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. While reading sysctl_fib_multipath_hash_fields, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ce5c9c20d364f156c885efed8c71fca2945db00f to < 36f5b86f309b3b11295d087cd7433f1c897caf94affected
  • ce5c9c20d364f156c885efed8c71fca2945db00f to < 548d6678c4a3d43667e59686665f8674b82440a3affected
  • ce5c9c20d364f156c885efed8c71fca2945db00f to < 8895a9c2ac76fb9d3922fed4fe092c8ec5e5ccccaffected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References