CVE-2022-49597

tcp: Fix data-races around sysctl_tcp_base_mss.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_base_mss.

While reading sysctl_tcp_base_mss, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	5d424d5a674f782d0659a3b66d951f412901faee to before 30b73edc1d2459ba2c71cb58fbf84a1a6e640fbfAffected 5d424d5a674f782d0659a3b66d951f412901faee to before 514d2254c7b8aa2d257f5ffc79f0d96be2d6bfdaAffected 5d424d5a674f782d0659a3b66d951f412901faee to before 4d7dea651b7fe0322be95054f64e3711afccc543Affected 5d424d5a674f782d0659a3b66d951f412901faee to before 9ca18116bc16ec31b9a3ce28ea1350badfa36128Affected 5d424d5a674f782d0659a3b66d951f412901faee to before 88d78bc097cd8ebc6541e93316c9d9bf651b13e8Affected
LinuxLinux	2.6.17Affected before 2.6.17Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

5d424d5a674f782d0659a3b66d951f412901faee to before 30b73edc1d2459ba2c71cb58fbf84a1a6e640fbfAffected
5d424d5a674f782d0659a3b66d951f412901faee to before 514d2254c7b8aa2d257f5ffc79f0d96be2d6bfdaAffected
5d424d5a674f782d0659a3b66d951f412901faee to before 4d7dea651b7fe0322be95054f64e3711afccc543Affected
5d424d5a674f782d0659a3b66d951f412901faee to before 9ca18116bc16ec31b9a3ce28ea1350badfa36128Affected
5d424d5a674f782d0659a3b66d951f412901faee to before 88d78bc097cd8ebc6541e93316c9d9bf651b13e8Affected

LinuxLinux

2.6.17Affected
before 2.6.17Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.