CVE-2022-49574

tcp: Fix data-races around sysctl_tcp_recovery.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_recovery.

While reading sysctl_tcp_recovery, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	4f41b1c58a32537542f14c1150099131613a5e8a to before c7a492db1f7c37c758a66915908677bd8bc5d368Affected 4f41b1c58a32537542f14c1150099131613a5e8a to before 92c35113c63306091df9211375eebd0abd8c2160Affected 4f41b1c58a32537542f14c1150099131613a5e8a to before d8781f7cd04091744f474a2bada74772084b9dc9Affected 4f41b1c58a32537542f14c1150099131613a5e8a to before a31e2d0cb5cfa2aae3144cac04f25031d5d20fb4Affected 4f41b1c58a32537542f14c1150099131613a5e8a to before 52ee7f5c4811ce6be1becd14d38ba1f8a8a0df81Affected 4f41b1c58a32537542f14c1150099131613a5e8a to before e7d2ef837e14a971a05f60ea08c47f3fed1a36e4Affected
LinuxLinux	4.4Affected before 4.4Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

4f41b1c58a32537542f14c1150099131613a5e8a to before c7a492db1f7c37c758a66915908677bd8bc5d368Affected
4f41b1c58a32537542f14c1150099131613a5e8a to before 92c35113c63306091df9211375eebd0abd8c2160Affected
4f41b1c58a32537542f14c1150099131613a5e8a to before d8781f7cd04091744f474a2bada74772084b9dc9Affected
4f41b1c58a32537542f14c1150099131613a5e8a to before a31e2d0cb5cfa2aae3144cac04f25031d5d20fb4Affected
4f41b1c58a32537542f14c1150099131613a5e8a to before 52ee7f5c4811ce6be1becd14d38ba1f8a8a0df81Affected
4f41b1c58a32537542f14c1150099131613a5e8a to before e7d2ef837e14a971a05f60ea08c47f3fed1a36e4Affected

LinuxLinux

4.4Affected
before 4.4Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.