← Back

CVE-2022-49957

nvd nist
Published: Jun 18, 2025Modified: Nov 14, 2025

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: kcm: fix strp_init() order and cleanup strp_init() is called just a few lines above this csk->sk_user_data check, it also initializes strp->work etc., therefore, it is unnecessary to call strp_done() to cancel the freshly initialized work. And if sk_user_data is already used by KCM, psock->strp should not be touched, particularly strp->work state, so we need to move strp_init() after the csk->sk_user_data check. This also makes a lockdep warning reported by syzbot go away.

Affected (13)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Linux
From 4.14.22 to 4.14.293
From 4.14.41 to 4.15
From 4.15.1 to 4.19.258
From 4.20 to 5.4.213
From 4.9.100 to 4.10
From 4.9.84 to 4.10
From 5.11 to 5.15.66
From 5.16 to 5.19.8
From 5.5 to 5.10.142
Version 4.15
Version 6.0 rc1
Version 6.0 rc2
Version 6.0 rc3

References (7)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch

Timeline

No history available yet.