CVE-2022-49585

tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.

While reading sysctl_tcp_fastopen_blackhole_timeout, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to before 0dc2f19d8c2636cebda7976b5ea40c6d69f0d891Affected cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to before a77a75a0e7f397550ab039f96115103e78dd5c69Affected cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to before 8afa5604e295046c02b79ccf9e2bbbf8d969d60eAffected cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 to before 021266ec640c7a4527e6cd4b7349a512b351de1dAffected
LinuxLinux	4.12Affected before 4.12Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.