In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctltcpmigrate_req.
While reading sysctltcpmigratereq, it can be changed concurrently. Thus, we need to add READONCE() to its readers.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49588.json"
}[
{
"signature_type": "Function",
"digest": {
"length": 597.0,
"function_hash": "187536086560601611556212393694218098237"
},
"signature_version": "v1",
"target": {
"function": "reuseport_stop_listen_sock",
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4177f545895b1da08447a80692f30617154efa6e",
"id": "CVE-2022-49588-4f2544d4",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"28952335235418911981851794368309966480",
"221172936739053476354576894076123067985",
"136078030041986078639893211836597132497",
"29658692876397899945721272887365089532",
"259581793207437663665243319873972519327",
"70818696090414444734906857471313905176",
"220451537368156986472674515169703766601",
"136855966618951325824743549933661326039"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e569a11eea20a1ccebc3c4e6366bf0574a449e1",
"id": "CVE-2022-49588-931c1570",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"28952335235418911981851794368309966480",
"221172936739053476354576894076123067985",
"136078030041986078639893211836597132497",
"29658692876397899945721272887365089532",
"259581793207437663665243319873972519327",
"70818696090414444734906857471313905176",
"220451537368156986472674515169703766601",
"136855966618951325824743549933661326039"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcf6c6d8aeffebca66f37b17ef1b57112e5e09c1",
"id": "CVE-2022-49588-b4f44f44",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 597.0,
"function_hash": "187536086560601611556212393694218098237"
},
"id": "CVE-2022-49588-b5213187",
"target": {
"function": "reuseport_stop_listen_sock",
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e569a11eea20a1ccebc3c4e6366bf0574a449e1",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 597.0,
"function_hash": "187536086560601611556212393694218098237"
},
"id": "CVE-2022-49588-cc3b2656",
"target": {
"function": "reuseport_stop_listen_sock",
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcf6c6d8aeffebca66f37b17ef1b57112e5e09c1",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Function",
"id": "CVE-2022-49588-d877be8b",
"digest": {
"length": 1069.0,
"function_hash": "116377010926915780005215245109173558090"
},
"target": {
"function": "reuseport_migrate_sock",
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcf6c6d8aeffebca66f37b17ef1b57112e5e09c1",
"signature_version": "v1",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"28952335235418911981851794368309966480",
"221172936739053476354576894076123067985",
"136078030041986078639893211836597132497",
"29658692876397899945721272887365089532",
"259581793207437663665243319873972519327",
"70818696090414444734906857471313905176",
"220451537368156986472674515169703766601",
"136855966618951325824743549933661326039"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4177f545895b1da08447a80692f30617154efa6e",
"id": "CVE-2022-49588-e641ec2e",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1069.0,
"function_hash": "116377010926915780005215245109173558090"
},
"signature_version": "v1",
"target": {
"function": "reuseport_migrate_sock",
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4177f545895b1da08447a80692f30617154efa6e",
"id": "CVE-2022-49588-e862c745",
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "reuseport_migrate_sock",
"file": "net/core/sock_reuseport.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e569a11eea20a1ccebc3c4e6366bf0574a449e1",
"id": "CVE-2022-49588-f5010837",
"digest": {
"length": 1069.0,
"function_hash": "116377010926915780005215245109173558090"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49588.json"