CVE-2022-49344: af_unix: Fix a data-race in unix_dgram_peer_wake_me().
In the Linux kernel, the following vulnerability has been resolved:
afunix: Fix a data-race in unixdgrampeerwakeme().
unixdgrampoll() calls unixdgrampeerwakeme() without other's lock held and check if its receive queue is full. Here we need to use unixrecvqfulllockless() instead of unixrecvqfull(), otherwise KCSAN will report a data-race.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49344?
CVE-2022-49344 is classified as a medium severity vulnerability within the Linux kernel.
How do I fix CVE-2022-49344?
To fix CVE-2022-49344, ensure that you update your Linux kernel to the latest patched version available.
What systems are affected by CVE-2022-49344?
CVE-2022-49344 affects multiple versions of the Linux kernel, particularly versions between 3.2.75 and 5.19-rc1.
What kind of vulnerability is CVE-2022-49344?
CVE-2022-49344 is a data race vulnerability that occurs in the Unix domain socket implementation of the Linux kernel.
Has CVE-2022-49344 been resolved?
Yes, CVE-2022-49344 has been resolved in the recent Linux kernel updates.