Riskcovery

CVE-2022-49573

tcp: Fix a data-race around sysctl_tcp_early_retrans.

State
Published
Severity
4.7 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_early_retrans.

While reading sysctl_tcp_early_retrans, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Scores

CVSSScoreVectorSource
3.14.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • eed530b6c67624db3f2cf477bac7c4d005d8f7ba to before 488d3ad98ef7cddce7054193dbae6b4349c6807dAffected
  • eed530b6c67624db3f2cf477bac7c4d005d8f7ba to before 83767fe800a311370330d4ec83aa76093b744a80Affected
  • eed530b6c67624db3f2cf477bac7c4d005d8f7ba to before 11e8b013d16e5db63f8f76acceb5b86964098aaaAffected
  • eed530b6c67624db3f2cf477bac7c4d005d8f7ba to before 5037ca9e4b169cc9aed0174d658c3d81fdaf8ea5Affected
  • eed530b6c67624db3f2cf477bac7c4d005d8f7ba to before d5975f6376ce90c2c483ae36bf88c9cface4c13bAffected
  • eed530b6c67624db3f2cf477bac7c4d005d8f7ba to before 52e65865deb6a36718a463030500f16530eaab74Affected
LinuxLinux
  • 3.5Affected
  • before 3.5Not affected
  • 4.19.254 through 4.19.*Not affected
  • 5.4.208 through 5.4.*Not affected
  • 5.10.134 through 5.10.*Not affected
  • 5.15.58 through 5.15.*Not affected
  • 5.18.15 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.