CVE-2022-49571
published 2025-02-26CVE-2022-49571: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_max_reordering. While reading…
PriorityP414medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
EPSS
0.19%
8.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_max_reordering.
While reading sysctl_tcp_max_reordering, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.16-1 (bookworm) | linux 5.18.16-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= dca145ffaa8d39ea1904491ac81b92b7049372c0 < 5e38cee24f19d19280c68f1ac8bf6790d607f60a | 5e38cee24f19d19280c68f1ac8bf6790d607f60a |
| linux | linux | >= dca145ffaa8d39ea1904491ac81b92b7049372c0 < 50a1d3d097503a90cf84ebe120afcde37e9c33b3 | 50a1d3d097503a90cf84ebe120afcde37e9c33b3 |
| linux | linux | >= dca145ffaa8d39ea1904491ac81b92b7049372c0 < 064852663308c801861bd54789d81421fa4c2928 | 064852663308c801861bd54789d81421fa4c2928 |
| linux | linux | >= dca145ffaa8d39ea1904491ac81b92b7049372c0 < ce3731c61589ed73364a5b55ce34131762ef9b60 | ce3731c61589ed73364a5b55ce34131762ef9b60 |
| linux | linux | >= dca145ffaa8d39ea1904491ac81b92b7049372c0 < 46deb91ac8a790286ad6d24cf92e7ab0ab2582bb | 46deb91ac8a790286ad6d24cf92e7ab0ab2582bb |
| linux | linux | >= dca145ffaa8d39ea1904491ac81b92b7049372c0 < a11e5b3e7a59fde1a90b0eaeaa82320495cf8cae | a11e5b3e7a59fde1a90b0eaeaa82320495cf8cae |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.136-1 | 5.10.136-1 |
| linux | linux_kernel | >= 0 < 5.18.16-1 | 5.18.16-1 |
| linux | linux_kernel | >= 0 < 5.18.16-1 | 5.18.16-1 |
| linux | linux_kernel | >= 0 < 5.18.16-1 | 5.18.16-1 |
| linux | linux_kernel | >= 3.19 < 4.19.254 | 4.19.254 |
| linux | linux_kernel | >= 4.20 < 5.4.208 | 5.4.208 |
| linux | linux_kernel | >= 5.11 < 5.15.58 | 5.15.58 |
| linux | linux_kernel | >= 5.16 < 5.18.15 | 5.18.15 |
| linux | linux_kernel | >= 5.5 < 5.10.134 | 5.10.134 |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
osv4.7MEDIUM
vendor_debian4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: tcp: Fix data-races around sysctl_tcp_max_reordering.
vendor_redhat·2025-02-26·CVSS 4.7
CVE-2022-49571 [MEDIUM] CWE-362 kernel: tcp: Fix data-races around sysctl_tcp_max_reordering.
kernel: tcp: Fix data-races around sysctl_tcp_max_reordering.
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_max_reordering.
While reading sysctl_tcp_max_reordering, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
Statement: The bug is that during reading of the variable ipv4.sysctl_tcp_max_reordering potentially could read incorrect value if race happens (if simultaneously value of this variable being changed). Since corruption could happen only during reading and value of variable itself not corrupted and very complex or impossible to trigger the bug, the security impact is limited. Only root user or other privileged user can change value of this variable.
Package: kernel (Red Hat Enterprise Li
Debian
CVE-2022-49571: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix da...
vendor_debian·2022·CVSS 4.7
CVE-2022-49571 [MEDIUM] CVE-2022-49571: linux - In the Linux kernel, the following vulnerability has been resolved: tcp: Fix da...
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_max_reordering. While reading sysctl_tcp_max_reordering, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.
Scope: local
bookworm: resolved (fixed in 5.18.16-1)
bullseye: resolved (fixed in 5.10.136-1)
forky: resolved (fixed in 5.18.16-1)
sid: resolved (fixed in 5.18.16-1)
trixie: resolved (fixed in 5.18.16-1)
GHSA
GHSA-jw75-r63h-46q8: In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_max_reordering
ghsa_unreviewed·2025-03-10
CVE-2022-49571 [MEDIUM] CWE-362 GHSA-jw75-r63h-46q8: In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_max_reordering
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix data-races around sysctl_tcp_max_reordering.
While reading sysctl_tcp_max_reordering, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
OSV
CVE-2022-49571: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_max_reordering
osv·2025-02-26·CVSS 4.7
CVE-2022-49571 [MEDIUM] CVE-2022-49571: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_max_reordering
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_max_reordering. While reading sysctl_tcp_max_reordering, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/064852663308c801861bd54789d81421fa4c2928https://git.kernel.org/stable/c/46deb91ac8a790286ad6d24cf92e7ab0ab2582bbhttps://git.kernel.org/stable/c/50a1d3d097503a90cf84ebe120afcde37e9c33b3https://git.kernel.org/stable/c/5e38cee24f19d19280c68f1ac8bf6790d607f60ahttps://git.kernel.org/stable/c/a11e5b3e7a59fde1a90b0eaeaa82320495cf8caehttps://git.kernel.org/stable/c/ce3731c61589ed73364a5b55ce34131762ef9b60
2025-02-26
Published