Riskcovery

CVE-2022-49344

af_unix: Fix a data-race in unix_dgram_peer_wake_me().

State
Published
Severity
4.7 Medium
Published
Feb 26, 2025
Updated
May 23, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Fix a data-race in unix_dgram_peer_wake_me().

unix_dgram_poll() calls unix_dgram_peer_wake_me() without `other`'s lock held and check if its receive queue is full. Here we need to use unix_recvq_full_lockless() instead of unix_recvq_full(), otherwise KCSAN will report a data-race.

Scores

CVSSScoreVectorSource
3.14.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • 7d267278a9ece963d77eefec61630223fce08c6c to before 95f0ba806277733bf6024e23e27e1be773701ccaAffected
  • 7d267278a9ece963d77eefec61630223fce08c6c to before 556720013c36c193d9cbfb06e7b33e51f0c39fbfAffected
  • 7d267278a9ece963d77eefec61630223fce08c6c to before c61848500a3fd6867dfa4834b8c7f97133eceb9fAffected
  • 7d267278a9ece963d77eefec61630223fce08c6c to before c926ae58f24f7bd55aa2ea4add9f952032507913Affected
  • 7d267278a9ece963d77eefec61630223fce08c6c to before 71e8bfc7f838cabc60cba24e09ca84c4f8321ab2Affected
  • 7d267278a9ece963d77eefec61630223fce08c6c to before 8801eb3ccd2e4e3b1a01449383e3321ae6dbd9d6Affected
  • 7d267278a9ece963d77eefec61630223fce08c6c to before 662a80946ce13633ae90a55379f1346c10f0c432Affected
  • 60bc010667ef06e0fb08d5ec599c0977adc2ac72Affected
  • a3b0f6e8a21ef02f69a15abac440572d8cde8c2aAffected
  • ec54d5ae9d298abf01c273233de9f2bc25d80475Affected
  • da8db0830a2ce63f628150307a01a315f5081202Affected
  • 9964b4c4ee925b2910723e509abd7241cff1ef84Affected
  • 9d054f57adc981a5f503d5eb9b259aa450b90dc5Affected
  • 72032798034d921ed565e3bf8dfdc3098f6473e2Affected
  • 5c77e26862ce604edea05b3442ed765e9756fe0fAffected
  • bad967fdd8ecbdd171f5f243657be033d2d081a7Affected
  • 58a6a46a036ce81a2a8ecaa6fc1537c894349e3fAffected
  • 2.6.32.70 to before 2.6.33Affected
  • 3.2.75 to before 3.3Affected
  • 3.4.111 to before 3.5Affected
  • 3.10.95 to before 3.11Affected
  • 3.12.52 to before 3.13Affected
  • 3.14.59 to before 3.15Affected
  • 3.18.26 to before 3.19Affected
  • 4.1.15 to before 4.2Affected
  • and 2 more versions
LinuxLinux
  • 4.4Affected
  • before 4.4Not affected
  • 4.19.247 through 4.19.*Not affected
  • 5.4.198 through 5.4.*Not affected
  • 5.10.122 through 5.10.*Not affected
  • 5.15.47 through 5.15.*Not affected
  • 5.17.15 through 5.17.*Not affected
  • 5.18.4 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.