CVE-2022-49601

tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.

While reading sysctl_tcp_fwmark_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	84f39b08d7868ce10eeaf640627cb89777f0ae93 to before 13207f9485b5de68decf296ceb0046f5eabb2485Affected 84f39b08d7868ce10eeaf640627cb89777f0ae93 to before 45fc82706a97242539d6b841ddd7a077ec20757bAffected 84f39b08d7868ce10eeaf640627cb89777f0ae93 to before abf70de2ec026ae8d7da4e79bec61888a880e00bAffected 84f39b08d7868ce10eeaf640627cb89777f0ae93 to before a7386602a2fe2f6192477e8ede291a815da09d81Affected 84f39b08d7868ce10eeaf640627cb89777f0ae93 to before d4f65615db7fca3df9f7e79eadf937e6ddb03c54Affected 84f39b08d7868ce10eeaf640627cb89777f0ae93 to before bf3134feffe61b7a0e21f60a04743f8da0958b53Affected 84f39b08d7868ce10eeaf640627cb89777f0ae93 to before 526d8cf8824f613c72dba2155542295e70135f62Affected 84f39b08d7868ce10eeaf640627cb89777f0ae93 to before 1a0008f9df59451d0a17806c1ee1a19857032fa8Affected
LinuxLinux	3.16Affected before 3.16Not affected 4.9.325 through 4.9.Not affected 4.14.290 through 4.14.Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

84f39b08d7868ce10eeaf640627cb89777f0ae93 to before 13207f9485b5de68decf296ceb0046f5eabb2485Affected
84f39b08d7868ce10eeaf640627cb89777f0ae93 to before 45fc82706a97242539d6b841ddd7a077ec20757bAffected
84f39b08d7868ce10eeaf640627cb89777f0ae93 to before abf70de2ec026ae8d7da4e79bec61888a880e00bAffected
84f39b08d7868ce10eeaf640627cb89777f0ae93 to before a7386602a2fe2f6192477e8ede291a815da09d81Affected
84f39b08d7868ce10eeaf640627cb89777f0ae93 to before d4f65615db7fca3df9f7e79eadf937e6ddb03c54Affected
84f39b08d7868ce10eeaf640627cb89777f0ae93 to before bf3134feffe61b7a0e21f60a04743f8da0958b53Affected
84f39b08d7868ce10eeaf640627cb89777f0ae93 to before 526d8cf8824f613c72dba2155542295e70135f62Affected
84f39b08d7868ce10eeaf640627cb89777f0ae93 to before 1a0008f9df59451d0a17806c1ee1a19857032fa8Affected

LinuxLinux

3.16Affected
before 3.16Not affected
4.9.325 through 4.9.*Not affected
4.14.290 through 4.14.*Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.