Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-49579

ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. While reading sysctl_fib_multipath_hash_policy, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 to < 21fb844bc1dc1461f5038d655aa1a14f39e13049affected
  • bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 to < 918ee6592ab9a2ff5316d06cfd4aaef60ccabec6affected
  • bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 to < 7998c12a08c97cc26660532c9f90a34bd7d8da5aaffected

Linux Linux

Default version status: affected

  • 4.12affected
  • 0 to < 4.12unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References