CVE-2022-49325: tcp: add accessors to read/set tp->snd_cwnd

Q: What is the severity of CVE-2022-49325?

CVE-2022-49325 has not been assigned a CVSS score, but it addresses a significant issue within the Linux kernel.

Q: Which versions of the Linux kernel are affected by CVE-2022-49325?

CVE-2022-49325 affects Linux kernel versions prior to 5.15.47 and between 5.16 and 5.17.15, as well as those between 5.18 and 5.18.4.

Q: How do I fix CVE-2022-49325?

To fix CVE-2022-49325, you should update your Linux kernel to the latest version available that is not affected by this vulnerability.

Q: What does CVE-2022-49325 impact in the Linux kernel?

CVE-2022-49325 impacts the handling of the tp->snd_cwnd variable, which could lead to code breaking assumptions within the TCP stack.

Published Feb 26, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

tcp: add accessors to read/set tp->sndcwnd

We had various bugs over the years with code breaking the assumption that tp->sndcwnd is greater than zero.

Lately, syzbot reported the WARNONONCE(!tp->priorcwnd) added in commit 8b8a321ff72c ("tcp: fix zero cwnd in tcpcwndreduction") can trigger, and without a repro we would have to spend considerable time finding the bug.

Instead of complaining too late, we want to catch where and when tp->sndcwnd is set to an illegal value.

Affected Software

164 affected componentsFixes available

Linux Kernel

Linux Linux kernel<5.15.47

Linux Linux kernel>=5.16<5.17.15

Linux Linux kernel>=5.18<5.18.4

debian/linux<5.18.5-1

5.18.5-1

debian/linux<5.18.5-1

5.18.5-1

debian/linux<5.18.5-1

5.18.5-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-azure*

ubuntu/linux-lts-xenial*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-hwe*

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-kvm*

ubuntu/linux-oracle*

ubuntu/linux-fips*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4*

ubuntu/linux-azure*

ubuntu/linux-azure-4.15*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4*

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4*

ubuntu/linux-kvm*

ubuntu/linux-oem*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4*

ubuntu/linux-raspi-5.4*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-5.15<5.15.0-1020.24~20.04.1

5.15.0-1020.24~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1020.25~20.04.1

5.15.0-1020.25~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1018.24~20.04.1

5.15.0-1018.24~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-48.54~20.04.1

5.15.0-48.54~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1016.21~20.04.1

5.15.0-1016.21~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-48.54~20.04.1

5.15.0-48.54~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1018.23~20.04.1

5.15.0-1018.23~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1019.22~20.04.1

5.15.0-1019.22~20.04.1

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-bluefield*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm*

ubuntu/linux-intel-5.13*

ubuntu/linux-iot*

ubuntu/linux-kvm*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-xilinx-zynqmp*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-48.54

5.15.0-48.54

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1020.24

5.15.0-1020.24

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1020.25

5.15.0-1020.25

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1024.30.1

5.15.0-1024.30.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1018.24

5.15.0-1018.24

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1016.19

5.15.0-1016.19

ubuntu/linux-gkeop<5.15.0-1003.5

5.15.0-1003.5

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1015.17

5.15.0-1015.17

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1016.21

5.15.0-1016.21

ubuntu/linux-kvm<5.15.0-1018.22

5.15.0-1018.22

ubuntu/linux-lowlatency<5.15.0-48.54

5.15.0-48.54

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1007.7

5.15.0-1007.7

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1018.23

5.15.0-1018.23

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1015.17

5.15.0-1015.17

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-realtime<5.15.0-1021.21

5.15.0-1021.21

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.18.5-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.24~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.25~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.24~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-48.54~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1016.21~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-48.54~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.23~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1019.22~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-48.54
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.24
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.25
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1024.30.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.24
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1016.19
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1003.5
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.17
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1016.21
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.22
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-48.54
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1007.7
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1018.23
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.17
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.21

Event History

Feb 26, 2025

CVE Published

via MITRE·02:10 AM

Data Sourced

via MITRE·02:10 AM

DescriptionSeverity

Data Sourced

via OSV·07:01 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·07:01 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-49325?

CVE-2022-49325 has not been assigned a CVSS score, but it addresses a significant issue within the Linux kernel.

Which versions of the Linux kernel are affected by CVE-2022-49325?

CVE-2022-49325 affects Linux kernel versions prior to 5.15.47 and between 5.16 and 5.17.15, as well as those between 5.18 and 5.18.4.

How do I fix CVE-2022-49325?

To fix CVE-2022-49325, you should update your Linux kernel to the latest version available that is not affected by this vulnerability.

What does CVE-2022-49325 impact in the Linux kernel?

CVE-2022-49325 impacts the handling of the tp->snd_cwnd variable, which could lead to code breaking assumptions within the TCP stack.

Are there known exploits for CVE-2022-49325?

As of now, there are no publicly known exploits associated with CVE-2022-49325.

CVE-2022-49325: tcp: add accessors to read/set tp->snd_cwnd

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2022-49325?

Which versions of the Linux kernel are affected by CVE-2022-49325?

How do I fix CVE-2022-49325?

What does CVE-2022-49325 impact in the Linux kernel?

Are there known exploits for CVE-2022-49325?

Company

Resources

Contact