Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-49602

ip: Fix a data-race around sysctl_fwmark_reflect.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ip: Fix a data-race around sysctl_fwmark_reflect. While reading sysctl_fwmark_reflect, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e110861f86094cd78cc85593b873970092deb43a to < fc92e3b4bebfdd986ef1d2c5019f236837b0b982affected
  • e110861f86094cd78cc85593b873970092deb43a to < 5e7a1be3e68deef250ad43cc91f7bb8d7d758b48affected
  • e110861f86094cd78cc85593b873970092deb43a to < 9096edcf4854289f92252e086cf6e498c7f8c21daffected
  • e110861f86094cd78cc85593b873970092deb43a to < 25a635a67c830766110410fea88ec4e6ee29684baffected
  • e110861f86094cd78cc85593b873970092deb43a to < 0ee76fe01ff3c0b4efaa500aecc90d7c8d3a8860affected
  • e110861f86094cd78cc85593b873970092deb43a to < dccf8a67f30e18980d13f07006e5a536bbd1e136affected
  • e110861f86094cd78cc85593b873970092deb43a to < a475ecc9ad919aa3ebdd4e4a6ee612b793bf74b3affected
  • e110861f86094cd78cc85593b873970092deb43a to < 85d0b4dbd74b95cc492b1f4e34497d3f894f5d9aaffected

Linux Linux

Default version status: affected

  • 3.16affected
  • 0 to < 3.16unaffected
  • 4.9.325 to ≤ 4.9.*unaffected
  • 4.14.290 to ≤ 4.14.*unaffected
  • 4.19.254 to ≤ 4.19.*unaffected
  • 5.4.208 to ≤ 5.4.*unaffected
  • 5.10.134 to ≤ 5.10.*unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References