CVE-2022-49344

Published: Feb 26, 2025Modified: Jun 17, 2026

4.7

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.0 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix a data-race in unix_dgram_peer_wake_me(). unix_dgram_poll() calls unix_dgram_peer_wake_me() without `other`'s lock held and check if its receive queue is full. Here we need to use unix_recvq_full_lockless() instead of unix_recvq_full(), otherwise KCSAN will report a data-race.

Affected (15)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	3.10.95 ≤ version < 3.11
Linux Linux Kernel	3.12.52 ≤ version < 3.13
Linux Linux Kernel	3.14.59 ≤ version < 3.15
Linux Linux Kernel	3.18.26 ≤ version < 3.19
Linux Linux Kernel	3.2.75 ≤ version < 3.3
Linux Linux Kernel	3.4.111 ≤ version < 3.5
Linux Linux Kernel	4.1.15 ≤ version < 4.2
Linux Linux Kernel	4.2.8 ≤ version < 4.3
Linux Linux Kernel	4.20 ≤ version < 5.4.198
Linux Linux Kernel	4.3.3 ≤ version < 4.19.247
Linux Linux Kernel	5.11 ≤ version < 5.15.47
Linux Linux Kernel	5.16 ≤ version < 5.17.15
Linux Linux Kernel	5.18 ≤ version < 5.18.4
Linux Linux Kernel	5.5 ≤ version < 5.10.122
Linux Linux Kernel	Version 5.19 rc1