CVE-2022-49588

tcp: Fix data-races around sysctl_tcp_migrate_req.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 23, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_migrate_req.

While reading sysctl_tcp_migrate_req, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	f9ac779f881c2ec3d1cdcd7fa9d4f9442bf60e80 to before fcf6c6d8aeffebca66f37b17ef1b57112e5e09c1Affected f9ac779f881c2ec3d1cdcd7fa9d4f9442bf60e80 to before 6e569a11eea20a1ccebc3c4e6366bf0574a449e1Affected f9ac779f881c2ec3d1cdcd7fa9d4f9442bf60e80 to before 4177f545895b1da08447a80692f30617154efa6eAffected cf6c06ac74879726c88fe1ec013727006cdbdd58Affected 5.10.188 to before 5.11Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.