CVE - CVE-2022-49344

CVE-ID
CVE-2022-49344	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix a data-race in unix_dgram_peer_wake_me(). unix_dgram_poll() calls unix_dgram_peer_wake_me() without `other`'s lock held and check if its receive queue is full. Here we need to use unix_recvq_full_lockless() instead of unix_recvq_full(), otherwise KCSAN will report a data-race.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/556720013c36c193d9cbfb06e7b33e51f0c39fbf URL:https://git.kernel.org/stable/c/556720013c36c193d9cbfb06e7b33e51f0c39fbf MISC:https://git.kernel.org/stable/c/662a80946ce13633ae90a55379f1346c10f0c432 URL:https://git.kernel.org/stable/c/662a80946ce13633ae90a55379f1346c10f0c432 MISC:https://git.kernel.org/stable/c/71e8bfc7f838cabc60cba24e09ca84c4f8321ab2 URL:https://git.kernel.org/stable/c/71e8bfc7f838cabc60cba24e09ca84c4f8321ab2 MISC:https://git.kernel.org/stable/c/8801eb3ccd2e4e3b1a01449383e3321ae6dbd9d6 URL:https://git.kernel.org/stable/c/8801eb3ccd2e4e3b1a01449383e3321ae6dbd9d6 MISC:https://git.kernel.org/stable/c/95f0ba806277733bf6024e23e27e1be773701cca URL:https://git.kernel.org/stable/c/95f0ba806277733bf6024e23e27e1be773701cca MISC:https://git.kernel.org/stable/c/c61848500a3fd6867dfa4834b8c7f97133eceb9f URL:https://git.kernel.org/stable/c/c61848500a3fd6867dfa4834b8c7f97133eceb9f MISC:https://git.kernel.org/stable/c/c926ae58f24f7bd55aa2ea4add9f952032507913 URL:https://git.kernel.org/stable/c/c926ae58f24f7bd55aa2ea4add9f952032507913
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)