CVE-2022-49596: tcp: Fix data-races around sysctl_tcp_min_snd_mss.
Published Feb 26, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctltcpminsndmss.
While reading sysctltcpminsndmss, it can be changed concurrently. Thus, we need to add READONCE() to its readers.
Affected Software
17 affected components
Linux Linux kernel
Linux Linux kernel>=3.16.69<3.17
Linux Linux kernel>=4.4.182<4.5
Linux Linux kernel>=4.9.182<4.10
Linux Linux kernel>=4.14.127<4.15
Linux Linux kernel>=4.19.52<4.20
Linux Linux kernel>=5.1.11<5.4.208
Linux Linux kernel>=5.5<5.10.134
Linux Linux kernel>=5.11<5.15.58
Linux Linux kernel>=5.16<5.18.15
Linux Linux kernel=5.19-rc1
Linux Linux kernel=5.19-rc2
Linux Linux kernel=5.19-rc3
Linux Linux kernel=5.19-rc4
Linux Linux kernel=5.19-rc5
Linux Linux kernel=5.19-rc6
Linux Linux kernel=5.19-rc7
Remediation
Event History
Feb 26, 2025
CVE Published
via MITRE·02:23 AM
Data Sourced
via MITRE·02:23 AM
Description
Data Sourced
via NVD·07:01 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access and conditions are needed to exploit this issue?
Exploitation requires local access and low privileges. The attack complexity is rated high, so additional timing or environmental conditions are likely needed.
2
What is the expected security impact?
The CVSS vector indicates a high availability impact, with no confidentiality or integrity impact identified.
3
What should teams do if they are responsible for affected systems?
Apply the available patch. The provided information does not identify affected or fixed kernel versions, so version-based exposure cannot be determined from this data alone.