CVE-2022-49587: tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
First published: Wed Feb 26 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. While reading sysctl_tcp_notsent_lowat, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| >=3.12<4.9.325 | ||
| >=4.10<4.14.290 | ||
| >=4.15<4.19.254 | ||
| >=4.20<5.4.208 | ||
| >=5.5<5.10.134 | ||
| >=5.11<5.15.58 | ||
| >=5.16<5.18.15 | ||
| =5.19-rc1 | ||
| =5.19-rc2 | ||
| =5.19-rc3 | ||
| =5.19-rc4 | ||
| =5.19-rc5 | ||
| =5.19-rc6 | ||
| =5.19-rc7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/91e21df688f8a75255ca9c459da39ac96300113a
- https://git.kernel.org/stable/c/c1b85c5a34294f7444c13bf828e0e84b0a0eed85
- https://git.kernel.org/stable/c/0f75343584ee474303e17efe0610bdd170af1d13
- https://git.kernel.org/stable/c/e9362a993886613ef0284c2a4911c6017c97d803
- https://git.kernel.org/stable/c/fd6f1284e380c377932186042ff0b5c987fb2b92
- https://git.kernel.org/stable/c/80d4d0c461674eea87f0977e12a2ecd334b9b79c
- https://git.kernel.org/stable/c/62e56cfeb2ae4b53ae9ca24c80f54093250ce64a
- https://git.kernel.org/stable/c/55be873695ed8912eb77ff46d1d1cadf028bd0f3
Frequently Asked Questions
What is the severity of CVE-2022-49587?
CVE-2022-49587 is categorized as having medium severity due to the potential for a data race condition.
How do I fix CVE-2022-49587?
To mitigate CVE-2022-49587, update to the latest version of the Linux Kernel where the vulnerability has been patched.
Which Linux Kernel versions are affected by CVE-2022-49587?
CVE-2022-49587 affects multiple versions of the Linux Kernel, specifically versions between 3.12 and 5.19-rc7.
What is the impact of CVE-2022-49587?
The impact of CVE-2022-49587 is that it allows for potential data inconsistency due to concurrent changes while reading certain socket parameters.
Is CVE-2022-49587 exploitable in production environments?
Yes, CVE-2022-49587 could be exploitable in production environments if the affected kernel versions are in use.
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/type
- agent/title
- agent/references
- agent/author
- agent/source
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/weakness
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/linux foundation
- canonical/linux kernel
- vendor/linux