CVE-2022-49572

tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

While reading sysctl_tcp_slow_start_after_idle, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 3b26e11b07a09b31247688bec61e2925d4a571b6Affected 35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 369d99c2b89f54473adcf9acdf40ea562b5a6e0eAffected 35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 0e3f82a03ec8c3808e87283e12946227415706c9Affected 35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 41aeba4506f6b70ec7500c6fe202731a4ba29fe5Affected 35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 68b6f9506747d507c7bfa374d178929b4157e8c6Affected 35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 4845b5713ab18a1bb6e31d1fbb4d600240b8b691Affected
LinuxLinux	2.6.18Affected before 2.6.18Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 3b26e11b07a09b31247688bec61e2925d4a571b6Affected
35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 369d99c2b89f54473adcf9acdf40ea562b5a6e0eAffected
35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 0e3f82a03ec8c3808e87283e12946227415706c9Affected
35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 41aeba4506f6b70ec7500c6fe202731a4ba29fe5Affected
35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 68b6f9506747d507c7bfa374d178929b4157e8c6Affected
35089bb203f44e33b6bbb6c4de0b0708f9a48921 to before 4845b5713ab18a1bb6e31d1fbb4d600240b8b691Affected

LinuxLinux

2.6.18Affected
before 2.6.18Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.