CVE-2022-49571

tcp: Fix data-races around sysctl_tcp_max_reordering.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_max_reordering.

While reading sysctl_tcp_max_reordering, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	dca145ffaa8d39ea1904491ac81b92b7049372c0 to before 5e38cee24f19d19280c68f1ac8bf6790d607f60aAffected dca145ffaa8d39ea1904491ac81b92b7049372c0 to before 50a1d3d097503a90cf84ebe120afcde37e9c33b3Affected dca145ffaa8d39ea1904491ac81b92b7049372c0 to before 064852663308c801861bd54789d81421fa4c2928Affected dca145ffaa8d39ea1904491ac81b92b7049372c0 to before ce3731c61589ed73364a5b55ce34131762ef9b60Affected dca145ffaa8d39ea1904491ac81b92b7049372c0 to before 46deb91ac8a790286ad6d24cf92e7ab0ab2582bbAffected dca145ffaa8d39ea1904491ac81b92b7049372c0 to before a11e5b3e7a59fde1a90b0eaeaa82320495cf8caeAffected
LinuxLinux	3.19Affected before 3.19Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

dca145ffaa8d39ea1904491ac81b92b7049372c0 to before 5e38cee24f19d19280c68f1ac8bf6790d607f60aAffected
dca145ffaa8d39ea1904491ac81b92b7049372c0 to before 50a1d3d097503a90cf84ebe120afcde37e9c33b3Affected
dca145ffaa8d39ea1904491ac81b92b7049372c0 to before 064852663308c801861bd54789d81421fa4c2928Affected
dca145ffaa8d39ea1904491ac81b92b7049372c0 to before ce3731c61589ed73364a5b55ce34131762ef9b60Affected
dca145ffaa8d39ea1904491ac81b92b7049372c0 to before 46deb91ac8a790286ad6d24cf92e7ab0ab2582bbAffected
dca145ffaa8d39ea1904491ac81b92b7049372c0 to before a11e5b3e7a59fde1a90b0eaeaa82320495cf8caeAffected

LinuxLinux

3.19Affected
before 3.19Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.