cbcvebase.
CVE-2022-49586
published 2025-02-26

CVE-2022-49586: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen. While reading sysctl_tcp_fastopen, it can…

PriorityP414medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
EPSS
0.19%
8.5th percentile
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctl_tcp_fastopen. While reading sysctl_tcp_fastopen, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Affected

18 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.16-1 (bookworm)linux 5.18.16-1 (bookworm)
linuxlinux
linuxlinux>= 2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 03da610696a32578fc4f986479341ce9d430df0803da610696a32578fc4f986479341ce9d430df08
linuxlinux>= 2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 25d53d858a6c0b89a6e69e376c2a57c4f4c2c8cc25d53d858a6c0b89a6e69e376c2a57c4f4c2c8cc
linuxlinux>= 2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 22938534c611136f35e2ca545bb668073ca5ef4922938534c611136f35e2ca545bb668073ca5ef49
linuxlinux>= 2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 539d9ab79eba3974b479cad61a8688c41fe62e12539d9ab79eba3974b479cad61a8688c41fe62e12
linuxlinux>= 2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 448ab998947996a0a451f8229f19087964cf2670448ab998947996a0a451f8229f19087964cf2670
linuxlinux>= 2100c8d2d9db23c0a09901a782bb4e3b21bee298 < 5a54213318c43f4009ae158347aa6016e3b9b55a5a54213318c43f4009ae158347aa6016e3b9b55a
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.136-15.10.136-1
linuxlinux_kernel>= 0 < 5.18.16-15.18.16-1
linuxlinux_kernel>= 0 < 5.18.16-15.18.16-1
linuxlinux_kernel>= 0 < 5.18.16-15.18.16-1
linuxlinux_kernel>= 3.6 < 4.19.2544.19.254
linuxlinux_kernel>= 4.20 < 5.4.2085.4.208
linuxlinux_kernel>= 5.11 < 5.15.585.15.58
linuxlinux_kernel>= 5.16 < 5.18.155.18.15
linuxlinux_kernel>= 5.5 < 5.10.1345.10.134

CVSS provenance

nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
osv4.7MEDIUM
vendor_debian4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.