Riskcovery

CVE-2022-49599

tcp: Fix data-races around sysctl_tcp_l3mdev_accept.

State
Published
Severity
4.7 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_l3mdev_accept.

While reading sysctl_tcp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSSScoreVectorSource
3.14.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • 6dd9a14e92e54895e143f10fef4d0b9abe109aa9 to before 1d9c81833dec46ccb52a1d0db970fefb7c4fa071Affected
  • 6dd9a14e92e54895e143f10fef4d0b9abe109aa9 to before 9ba9cd43b5776c27d25e5a32dde9e80bdeb1c6a1Affected
  • 6dd9a14e92e54895e143f10fef4d0b9abe109aa9 to before 7d38d86b818104cf88961f3aebea34da89364a8eAffected
  • 6dd9a14e92e54895e143f10fef4d0b9abe109aa9 to before 08a75f10679470552a3a443f9aefd1399604d31dAffected
LinuxLinux
  • 4.5Affected
  • before 4.5Not affected
  • 5.10.137 through 5.10.*Not affected
  • 5.15.58 through 5.15.*Not affected
  • 5.18.15 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.