CVE-2022-3567: Linux Kernel IPv6 inet6_dgram_ops race condition
A data race problem was found in sk->skprot in the network subsystem in ipv6 in the Linux kernel. This issue occurs while some functions access critical data, leading to a denial of service.
Other sources
A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6streamops/inet6dgramops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability.
Some functions in inet6(stream|dgram)ops still access sk->skprot without locksock() or rtnllock()causing data races around sk->skprot.
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=364f997b5cfe1db0d63a390fe7c801fa2b3115f6
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-477.10.1.rt7.274.el8_8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-477.10.1.el8_8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-284.11.1.el9_2 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:5.14.0-284.11.1.rt14.296.el9_2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-3567?
CVE-2022-3567 is classified as a denial of service vulnerability affecting the Linux kernel.
How do I fix CVE-2022-3567?
To fix CVE-2022-3567, upgrade to kernel versions 0:4.18.0-477.10.1.rt7.274.el8_8, 0:4.18.0-477.10.1.el8_8, 0:5.14.0-284.11.1.el9_2, or 6.1.
What causes CVE-2022-3567?
CVE-2022-3567 is caused by a data race in sk->sk_prot within the IPv6 network subsystem of the Linux kernel.
Which Linux distributions are affected by CVE-2022-3567?
CVE-2022-3567 affects various versions of the Linux kernel found in distributions like Red Hat and Debian.
Is there a workaround for CVE-2022-3567?
There is no known workaround for CVE-2022-3567, so updating the kernel is the recommended solution.