Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-49587

tcp: Fix a data-race around sysctl_tcp_notsent_lowat.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. While reading sysctl_tcp_notsent_lowat, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36 to < 91e21df688f8a75255ca9c459da39ac96300113aaffected
  • c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36 to < c1b85c5a34294f7444c13bf828e0e84b0a0eed85affected
  • c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36 to < 0f75343584ee474303e17efe0610bdd170af1d13affected
  • c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36 to < e9362a993886613ef0284c2a4911c6017c97d803affected
  • c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36 to < fd6f1284e380c377932186042ff0b5c987fb2b92affected
  • c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36 to < 80d4d0c461674eea87f0977e12a2ecd334b9b79caffected
  • c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36 to < 62e56cfeb2ae4b53ae9ca24c80f54093250ce64aaffected
  • c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36 to < 55be873695ed8912eb77ff46d1d1cadf028bd0f3affected

Linux Linux

Default version status: affected

  • 3.12affected
  • 0 to < 3.12unaffected
  • 4.9.325 to ≤ 4.9.*unaffected
  • 4.14.290 to ≤ 4.14.*unaffected
  • 4.19.254 to ≤ 4.19.*unaffected
  • 5.4.208 to ≤ 5.4.*unaffected
  • 5.10.134 to ≤ 5.10.*unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References