← CVE Intelligence

CVE-2022-49577

udp: Fix a data-race around sysctl_udp_l3mdev_accept. PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: udp: Fix a data-race around sysctl_udp_l3mdev_accept. While reading sysctl_udp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 63a6fff353d01da5a22b72670c434bf12fa0e3b8 before f39b03bd727a8fea62e82f10fe2e0d753b9930ff; affected 63a6fff353d01da5a22b72670c434bf12fa0e3b8 before fcaef69c79ec222e55643e666b80b221e70fa6a8; affected 63a6fff353d01da5a22b72670c434bf12fa0e3b8 before 3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c; affected 63a6fff353d01da5a22b72670c434bf12fa0e3b8 before cb0d28934ca10f99c47e2c6f451405d6c954fe48; affected 63a6fff353d01da5a22b72670c434bf12fa0e3b8 before 3d72bb4188c708bb16758c60822fc4dda7a95174
Linux / Linuxaffected 4.11; unaffected 0 before 4.11; unaffected 5.4.208 through 5.4.*; unaffected 5.10.134 through 5.10.*; unaffected 5.15.58 through 5.15.*; unaffected 5.18.15 through 5.18.*; unaffected 5.19 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.