Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-49577

udp: Fix a data-race around sysctl_udp_l3mdev_accept.

Description

In the Linux kernel, the following vulnerability has been resolved: udp: Fix a data-race around sysctl_udp_l3mdev_accept. While reading sysctl_udp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 63a6fff353d01da5a22b72670c434bf12fa0e3b8 to < f39b03bd727a8fea62e82f10fe2e0d753b9930ffaffected
  • 63a6fff353d01da5a22b72670c434bf12fa0e3b8 to < fcaef69c79ec222e55643e666b80b221e70fa6a8affected
  • 63a6fff353d01da5a22b72670c434bf12fa0e3b8 to < 3f2ac2d6511bb0652abf4d7388d65bb9ff1c641caffected
  • 63a6fff353d01da5a22b72670c434bf12fa0e3b8 to < cb0d28934ca10f99c47e2c6f451405d6c954fe48affected
  • 63a6fff353d01da5a22b72670c434bf12fa0e3b8 to < 3d72bb4188c708bb16758c60822fc4dda7a95174affected

Linux Linux

Default version status: affected

  • 4.11affected
  • 0 to < 4.11unaffected
  • 5.4.208 to ≤ 5.4.*unaffected
  • 5.10.134 to ≤ 5.10.*unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References