CVE-2022-49631

raw: Fix a data-race around sysctl_raw_l3mdev_accept.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

raw: Fix a data-race around sysctl_raw_l3mdev_accept.

While reading sysctl_raw_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	6897445fb194c8ad046df4a13e1ee9f080a5a21e to before cc9540ba5b3652c473af7e54892a48cdced87983Affected 6897445fb194c8ad046df4a13e1ee9f080a5a21e to before 038a87b3e460d2ee579c8b1bd3890d816d6687b1Affected 6897445fb194c8ad046df4a13e1ee9f080a5a21e to before 46e9c46203fd4676720ddca0fef7eff26826648eAffected 6897445fb194c8ad046df4a13e1ee9f080a5a21e to before ab5adca2e17d6595f3fc0e25ccb6bcbe2e01ca4fAffected 6897445fb194c8ad046df4a13e1ee9f080a5a21e to before 1dace014928e6e385363032d359a04dee9158af0Affected
LinuxLinux	5.0Affected before 5.0Not affected 5.4.207 through 5.4.Not affected 5.10.132 through 5.10.Not affected 5.15.56 through 5.15.Not affected 5.18.13 through 5.18.Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

6897445fb194c8ad046df4a13e1ee9f080a5a21e to before cc9540ba5b3652c473af7e54892a48cdced87983Affected
6897445fb194c8ad046df4a13e1ee9f080a5a21e to before 038a87b3e460d2ee579c8b1bd3890d816d6687b1Affected
6897445fb194c8ad046df4a13e1ee9f080a5a21e to before 46e9c46203fd4676720ddca0fef7eff26826648eAffected
6897445fb194c8ad046df4a13e1ee9f080a5a21e to before ab5adca2e17d6595f3fc0e25ccb6bcbe2e01ca4fAffected
6897445fb194c8ad046df4a13e1ee9f080a5a21e to before 1dace014928e6e385363032d359a04dee9158af0Affected

LinuxLinux

5.0Affected
before 5.0Not affected
5.4.207 through 5.4.*Not affected
5.10.132 through 5.10.*Not affected
5.15.56 through 5.15.*Not affected
5.18.13 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.