NetSight
medium4.7

CVE-2022-49588

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_migrate_req.

Impact

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_migrate_req. While reading sysctl_tcp_migrate_req, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.10.188 before 5.11
from 5.14 before 5.15.58
from 5.16 before 5.18.15
Version 5.19

Weakness classification

References