CVE-2022-49586

tcp: Fix data-races around sysctl_tcp_fastopen.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_fastopen.

While reading sysctl_tcp_fastopen, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 03da610696a32578fc4f986479341ce9d430df08Affected 2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 25d53d858a6c0b89a6e69e376c2a57c4f4c2c8ccAffected 2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 22938534c611136f35e2ca545bb668073ca5ef49Affected 2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 539d9ab79eba3974b479cad61a8688c41fe62e12Affected 2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 448ab998947996a0a451f8229f19087964cf2670Affected 2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 5a54213318c43f4009ae158347aa6016e3b9b55aAffected
LinuxLinux	3.6Affected before 3.6Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 03da610696a32578fc4f986479341ce9d430df08Affected
2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 25d53d858a6c0b89a6e69e376c2a57c4f4c2c8ccAffected
2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 22938534c611136f35e2ca545bb668073ca5ef49Affected
2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 539d9ab79eba3974b479cad61a8688c41fe62e12Affected
2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 448ab998947996a0a451f8229f19087964cf2670Affected
2100c8d2d9db23c0a09901a782bb4e3b21bee298 to before 5a54213318c43f4009ae158347aa6016e3b9b55aAffected

LinuxLinux

3.6Affected
before 3.6Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.