CVE-2022-3566: Linux Kernel TCP tcp_setsockopt race condition

Published Oct 6, 2022
·
Updated

A vulnerability was found in the tcp subsystem in the Linux Kernel, due to a data race around icsk->icskafops. This issue could allow an attacker to leak internal kernel information.

Other sources

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is said to be difficult. The vulnerability was introduced in 2.6.12, commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ("Linux-2.6.12-rc2"). Upgrading to version 4.19.317, 5.4.279, 5.10.221, 5.15.162 and 6.1 will fix this issue. The name of the patch is fcd31dd8291b23d713245947ec2b2d99ef07aef2/3b32f265805a49071e2c4568a524398ba22bf93c/d529193eae979a7bf2255cd9fe68b7af7a1c91b3/5bb642cc3355ffd3c8bca0a8bd8e6e65bcc2091c/f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57. The affected component should be upgraded.

— MITRE

A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function tcpgetsockopt/tcpsetsockopt of the component TCP Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. The identifier VDB-211089 was assigned to this vulnerability.

setsockopt(IPV6ADDRFORM) and tcpv6connect() change icsk->icskafops under locksock(), but tcp(get|set)sockopt() read it locklessly causes data-race in tcpsetsockopt / tcpv6connect

Crash: BUG: KCSAN: data-race in tcpsetsockopt / tcpv6connect

write to 0xffff88813c624518 of 8 bytes by task 23936 on cpu 0: tcpv6connect+0x5b3/0xce0 net/ipv6/tcpipv6.c:240 inetstreamconnect+0x159/0x6d0 net/ipv4/afinet.c:660 inetstreamconnect+0x44/0x70 net/ipv4/afinet.c:724 sysconnectfile net/socket.c:1976 [inline] sysconnect+0x197/0x1b0 net/socket.c:1993 dosysconnect net/socket.c:2003 [inline] sesysconnect net/socket.c:2000 [inline] x64sysconnect+0x3d/0x50 net/socket.c:2000 dosyscallx64 arch/x86/entry/common.c:50 [inline] dosyscall64+0x2b/0x70 arch/x86/entry/common.c:80 entrySYSCALL64afterhwframe+0x63/0xcd

read to 0xffff88813c624518 of 8 bytes by task 23937 on cpu 1: tcpsetsockopt+0x147/0x1c80 net/ipv4/tcp.c:3789 sockcommonsetsockopt+0x5d/0x70 net/core/sock.c:3585 syssetsockopt+0x212/0x2b0 net/socket.c:2252 dosyssetsockopt net/socket.c:2263 [inline] sesyssetsockopt net/socket.c:2260 [inline] x64syssetsockopt+0x62/0x70 net/socket.c:2260 dosyscallx64 arch/x86/entry/common.c:50 [inline] dosyscall64+0x2b/0x70 arch/x86/entry/common.c:80 entrySYSCALL64afterhwframe+0x63/0xcd

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57

— Red Hat

Affected Software

144 affected componentsFixes available
redhat/kernel-rt<0:4.18.0-477.10.1.rt7.274.el8_8
0:4.18.0-477.10.1.rt7.274.el8_8
redhat/kernel<0:4.18.0-477.10.1.el8_8
0:4.18.0-477.10.1.el8_8
redhat/kernel<0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
redhat/kernel-rt<0:5.14.0-284.11.1.rt14.296.el9_2
0:5.14.0-284.11.1.rt14.296.el9_2
Linux Linux kernel
redhat/kernel<6.1
6.1
Linux Linux kernel>=2.6.12<4.19.317
Linux Linux kernel>=4.20<5.4.279
Linux Linux kernel>=5.5<5.10.221
Linux Linux kernel>=5.11<5.15.162
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
debian/linux<6.1.4-1
6.1.4-1
debian/linux<6.1.4-1
6.1.4-1
debian/linux<6.1.4-1
6.1.4-1
ubuntu/linux-aws<4.4.0-1114.120
4.4.0-1114.120
ubuntu/linux-azure<4.15.0-1157.172~14.04.2
4.15.0-1157.172~14.04.2
ubuntu/linux-lts-xenial<4.4.0-235.269~14.04.1
4.4.0-235.269~14.04.1
ubuntu/linux*
ubuntu/linux<4.4.0-235.269
4.4.0-235.269
ubuntu/linux-aws<4.4.0-1152.167
4.4.0-1152.167
ubuntu/linux-aws-hwe<4.15.0-1146.158~16.04.2
4.15.0-1146.158~16.04.2
ubuntu/linux-azure<4.15.0-1159.174~16.04.1
4.15.0-1159.174~16.04.1
ubuntu/linux-gcp<4.15.0-1141.157~16.04.2
4.15.0-1141.157~16.04.2
ubuntu/linux-hwe<4.15.0-200.211~16.04.2
4.15.0-200.211~16.04.2
ubuntu/linux-kvm<4.4.0-1115.125
4.4.0-1115.125
ubuntu/linux-oracle<4.15.0-1111.122~16.04.2
4.15.0-1111.122~16.04.2
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1084.91
4.4.0-1084.91
ubuntu/linux-fips*
ubuntu/linux<4.15.0-200.211
4.15.0-200.211
ubuntu/linux-aws<4.15.0-1146.158
4.15.0-1146.158
ubuntu/linux-aws-5.4<5.4.0-1092.100~18.04.2
5.4.0-1092.100~18.04.2
ubuntu/linux-azure-4.15<4.15.0-1157.172
4.15.0-1157.172
ubuntu/linux-azure-5.4<5.4.0-1098.104~18.04.2
5.4.0-1098.104~18.04.2
ubuntu/linux-dell300x<4.15.0-1057.62
4.15.0-1057.62
ubuntu/linux-gcp-4.15<4.15.0-1141.157
4.15.0-1141.157
ubuntu/linux-gcp-5.4<5.4.0-1096.105~18.04.2
5.4.0-1096.105~18.04.2
ubuntu/linux-hwe-5.4<5.4.0-135.152~18.04.2
5.4.0-135.152~18.04.2
ubuntu/linux-ibm-5.4<5.4.0-1040.45~18.04.2
5.4.0-1040.45~18.04.2
ubuntu/linux-kvm<4.15.0-1132.137
4.15.0-1132.137
ubuntu/linux-oracle<4.15.0-1111.122
4.15.0-1111.122
ubuntu/linux-oracle-5.4<5.4.0-1090.99~18.04.2
5.4.0-1090.99~18.04.2
ubuntu/linux-raspi-5.4<5.4.0-1077.88~18.04.2
5.4.0-1077.88~18.04.2
ubuntu/linux-raspi2<4.15.0-1124.132
4.15.0-1124.132
ubuntu/linux-snapdragon<4.15.0-1142.152
4.15.0-1142.152
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-azure*
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-5.3*
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-edge*
ubuntu/linux-oem*
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-aws-fips<4.15.0-2085.91
4.15.0-2085.91
ubuntu/linux-azure-fips<4.15.0-2066.72
4.15.0-2066.72
ubuntu/linux-fips<4.15.0-1103.114
4.15.0-1103.114
ubuntu/linux-gcp-fips<4.15.0-2050.55
4.15.0-2050.55
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-135.152
5.4.0-135.152
ubuntu/linux-aws<5.4.0-1092.100
5.4.0-1092.100
ubuntu/linux-aws-5.15<5.15.0-1026.30~20.04.2
5.15.0-1026.30~20.04.2
ubuntu/linux-azure<5.4.0-1098.104
5.4.0-1098.104
ubuntu/linux-azure-5.15<5.15.0-1029.36~20.04.1
5.15.0-1029.36~20.04.1
ubuntu/linux-bluefield<5.4.0-1054.60
5.4.0-1054.60
ubuntu/linux-gcp<5.4.0-1096.105
5.4.0-1096.105
ubuntu/linux-gcp-5.15<5.15.0-1025.32~20.04.2
5.15.0-1025.32~20.04.2
ubuntu/linux-gke<5.4.0-1090.97
5.4.0-1090.97
ubuntu/linux-gke-5.15<5.15.0-1023.28~20.04.2
5.15.0-1023.28~20.04.2
ubuntu/linux-gkeop<5.4.0-1060.64
5.4.0-1060.64
ubuntu/linux-gkeop-5.15<5.15.0-1011.15~20.04.2
5.15.0-1011.15~20.04.2
ubuntu/linux-hwe-5.15<5.15.0-56.62~20.04.1
5.15.0-56.62~20.04.1
ubuntu/linux-ibm<5.4.0-1040.45
5.4.0-1040.45
ubuntu/linux-intel-iotg-5.15<5.15.0-1021.26~20.04.1
5.15.0-1021.26~20.04.1
ubuntu/linux-iot<5.4.0-1009.11
5.4.0-1009.11
ubuntu/linux-kvm<5.4.0-1082.88
5.4.0-1082.88
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-56.62~20.04.1
5.15.0-56.62~20.04.1
ubuntu/linux-oem-5.14<5.14.0-1055.62
5.14.0-1055.62
ubuntu/linux-oracle<5.4.0-1090.99
5.4.0-1090.99
ubuntu/linux-oracle-5.15<5.15.0-1025.31~20.04.2
5.15.0-1025.31~20.04.2
ubuntu/linux-raspi<5.4.0-1077.88
5.4.0-1077.88
ubuntu/linux-riscv-5.15<5.15.0-1026.30~20.04.2
5.15.0-1026.30~20.04.2
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1092.100+fips1
5.4.0-1092.100+fips1
ubuntu/linux-azure-fips<5.4.0-1098.104+fips1
5.4.0-1098.104+fips1
ubuntu/linux-fips<5.4.0-1068.77
5.4.0-1068.77
ubuntu/linux-gcp-fips<5.4.0-1096.105+fips1
5.4.0-1096.105+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-56.62
5.15.0-56.62
ubuntu/linux-aws<5.15.0-1026.30
5.15.0-1026.30
ubuntu/linux-azure<5.15.0-1029.36
5.15.0-1029.36
ubuntu/linux-azure-fde<5.15.0-1029.36.1
5.15.0-1029.36.1
ubuntu/linux-gcp<5.15.0-1025.32
5.15.0-1025.32
ubuntu/linux-gke<5.15.0-1023.28
5.15.0-1023.28
ubuntu/linux-gkeop<5.15.0-1011.15
5.15.0-1011.15
ubuntu/linux-ibm<5.15.0-1021.24
5.15.0-1021.24
ubuntu/linux-intel-iot-realtime*
ubuntu/linux-intel-iotg<5.15.0-1021.26
5.15.0-1021.26
ubuntu/linux-kvm<5.15.0-1024.29
5.15.0-1024.29
ubuntu/linux-lowlatency<5.15.0-56.62
5.15.0-56.62
ubuntu/linux-nvidia<5.15.0-1015.15
5.15.0-1015.15
ubuntu/linux-oem-5.17<5.17.0-1024.25
5.17.0-1024.25
ubuntu/linux-oem-6.0*
ubuntu/linux-oracle<5.15.0-1025.31
5.15.0-1025.31
ubuntu/linux-raspi<5.15.0-1021.23
5.15.0-1021.23
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-realtime<5.15.0-1028.31
5.15.0-1028.31
ubuntu/linux-raspi-realtime*
ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel-rt to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-477.10.1.rt7.274.el8_8
  2. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-477.10.1.el8_8
  3. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:5.14.0-284.11.1.el9_2
  4. Upgrade

    Upgrade redhat/kernel-rt to a version that resolves this vulnerability.

    Fixed in 0:5.14.0-284.11.1.rt14.296.el9_2
  5. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.1
  6. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1114.120
  7. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1157.172~14.04.2
  8. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-235.269~14.04.1
  9. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-235.269
  10. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1152.167
  11. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1146.158~16.04.2
  12. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1159.174~16.04.1
  13. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1141.157~16.04.2
  14. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-200.211~16.04.2
  15. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1115.125
  16. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1111.122~16.04.2
  17. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1084.91
  18. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-200.211
  19. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1146.158
  20. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1092.100~18.04.2
  21. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1157.172
  22. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1098.104~18.04.2
  23. Upgrade

    Upgrade ubuntu/linux-dell300x to a version that resolves this vulnerability.

    Fixed in 4.15.0-1057.62
  24. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1141.157
  25. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1096.105~18.04.2
  26. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-135.152~18.04.2
  27. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1040.45~18.04.2
  28. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1132.137
  29. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1111.122
  30. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1090.99~18.04.2
  31. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1077.88~18.04.2
  32. Upgrade

    Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1124.132
  33. Upgrade

    Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.

    Fixed in 4.15.0-1142.152
  34. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2085.91
  35. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2066.72
  36. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1103.114
  37. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2050.55
  38. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-135.152
  39. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1092.100
  40. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1026.30~20.04.2
  41. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1098.104
  42. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1029.36~20.04.1
  43. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1054.60
  44. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1096.105
  45. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1025.32~20.04.2
  46. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.4.0-1090.97
  47. Upgrade

    Upgrade ubuntu/linux-gke-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1023.28~20.04.2
  48. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1060.64
  49. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1011.15~20.04.2
  50. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-56.62~20.04.1
  51. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1040.45
  52. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1021.26~20.04.1
  53. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1009.11
  54. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1082.88
  55. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-56.62~20.04.1
  56. Upgrade

    Upgrade ubuntu/linux-oem-5.14 to a version that resolves this vulnerability.

    Fixed in 5.14.0-1055.62
  57. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1090.99
  58. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1025.31~20.04.2
  59. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1077.88
  60. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1026.30~20.04.2
  61. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1092.100+fips1
  62. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1098.104+fips1
  63. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1068.77
  64. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1096.105+fips1
  65. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-56.62
  66. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1026.30
  67. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1029.36
  68. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1029.36.1
  69. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1025.32
  70. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1023.28
  71. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1011.15
  72. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1021.24
  73. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1021.26
  74. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1024.29
  75. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-56.62
  76. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1015.15
  77. Upgrade

    Upgrade ubuntu/linux-oem-5.17 to a version that resolves this vulnerability.

    Fixed in 5.17.0-1024.25
  78. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1025.31
  79. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1021.23
  80. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1028.31
  81. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
  82. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 6.1.4-1
  83. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 4.19.317Patch f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57
  84. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 5.4.279Patch f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57
  85. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 5.10.221Patch f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57
  86. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 5.15.162Patch f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57
  87. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 6.1Patch f49cd2f4d6170d27a2c61f1fecb03d8a70c91f57

Event History

Oct 6, 2022
CVE Published
06:30 AM
Oct 17, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via OSV·07:15 PM
DescriptionSeverityAffected Software
Event
via OSV·07:15 PM
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Nov 18, 2022
Data Sourced
via Red Hat·09:03 AM
DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2022-3566?

CVE-2022-3566 is classified as a problematic vulnerability due to a data race in the Linux Kernel tcp subsystem.

2

How do I fix CVE-2022-3566?

To mitigate CVE-2022-3566, upgrade your Linux Kernel to a fixed version such as 0:4.18.0-477.10.1.rt7.274.el8_8 or newer.

3

What systems are affected by CVE-2022-3566?

CVE-2022-3566 affects various versions of the Linux Kernel including kernel-rt and standard kernel packages from Red Hat and Debian.

4

What type of attack does CVE-2022-3566 enable?

CVE-2022-3566 can potentially allow an attacker to leak internal kernel information due to a data race condition.

5

Is there a workaround for CVE-2022-3566?

Currently, the most effective mitigation for CVE-2022-3566 is to update to a secure version of the Linux Kernel.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203