Skip to content
CVE PROGRAM SOURCE RECORD4.7 Medium

CVE-2022-49603

ip: Fix data-races around sysctl_ip_fwd_update_priority.

Description

In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_update_priority. While reading sysctl_ip_fwd_update_priority, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 432e05d328921c68c35bfdeff7d7b7400b8e3d1a to < 11038fa781ab916535c53351537b22d6d405667daffected
  • 432e05d328921c68c35bfdeff7d7b7400b8e3d1a to < 351f81f7d7185d18a9ff76f8f8c2fa8c4eea563baffected
  • 432e05d328921c68c35bfdeff7d7b7400b8e3d1a to < bcc03369d3277ae075ed421f0c8bf4adb5e65b74affected
  • 432e05d328921c68c35bfdeff7d7b7400b8e3d1a to < 7bf9e18d9a5e99e3c83482973557e9f047b051e7affected

Linux Linux

Default version status: affected

  • 4.19affected
  • 0 to < 4.19unaffected
  • 5.10.134 to ≤ 5.10.*unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References