Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-49957

kcm: fix strp_init() order and cleanup

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: kcm: fix strp_init() order and cleanup strp_init() is called just a few lines above this csk->sk_user_data check, it also initializes strp->work etc., therefore, it is unnecessary to call strp_done() to cancel the freshly initialized work. And if sk_user_data is already used by KCM, psock->strp should not be touched, particularly strp->work state, so we need to move strp_init() after the csk->sk_user_data check. This also makes a lockdep warning reported by syzbot go away.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 44890e9ff771ef11777b2d1ebf8589255eb12502 to < 473f394953216614087f4179e55cdf0cf616a13baffected
  • e5571240236c5652f3e079b1d5866716a7ad819c to < a8a0c321319ad64a5427d6172cd9c23b4d6ca1e8affected
  • e5571240236c5652f3e079b1d5866716a7ad819c to < 0946ff31d1a8778787bf6708beb20f38715267ccaffected
  • e5571240236c5652f3e079b1d5866716a7ad819c to < 1b6666964ca1de93a7bf06e122bcf3616dbd33a9affected
  • e5571240236c5652f3e079b1d5866716a7ad819c to < 55fb8c3baa8071c5d533a9ad48624e44e2a04ef5affected
  • e5571240236c5652f3e079b1d5866716a7ad819c to < f865976baa85915c7672f351b74d5974b93215f6affected
  • e5571240236c5652f3e079b1d5866716a7ad819c to < 8fc29ff3910f3af08a7c40a75d436b5720efe2bfaffected
  • 085cbbda4b4cc7dd2ba63806346881c2c2e10107affected
  • 383250363daf01eb7aa3728c09ef8a4f6d8a3252affected
  • 19042316b9e12c93bf334a04d4dd7a4e846c7311affected
  • 4.14.22 to < 4.14.293affected
  • 4.9.84 to < 4.10affected
  • 4.9.100 to < 4.10affected

Linux Linux

Default version status: affected

  • 4.15affected
  • 0 to < 4.15unaffected
  • 4.14.293 to ≤ 4.14.*unaffected
  • 4.19.258 to ≤ 4.19.*unaffected
  • 5.4.213 to ≤ 5.4.*unaffected
  • 5.10.142 to ≤ 5.10.*unaffected
  • 5.15.66 to ≤ 5.15.*unaffected
  • 5.19.8 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References