Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-49585

tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. While reading sysctl_tcp_fastopen_blackhole_timeout, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to < 0dc2f19d8c2636cebda7976b5ea40c6d69f0d891affected
  • cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to < a77a75a0e7f397550ab039f96115103e78dd5c69affected
  • cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to < 8afa5604e295046c02b79ccf9e2bbbf8d969d60eaffected
  • cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to < 021266ec640c7a4527e6cd4b7349a512b351de1daffected

Linux Linux

Default version status: affected

  • 4.12affected
  • 0 to < 4.12unaffected
  • 5.10.134 to ≤ 5.10.*unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References