From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 10606214804 for ; Wed, 26 Feb 2025 02:23:55 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536635; cv=none; b=AlmJwBErQT4I2mTNAsO8/bMLB5G33HOi0ZGJZa6XrSkmRGp9fFLC35tXdmvqdcY+PK7OUXn+HECXfcIRiLBZqTfYJza7MHNz1x3FldT411tnbfW/eoWJ7SlF1yuB9oR2tkclnDf085H455v9DNDSkhkPYxxDCa8+BPQpO/4vFWA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536635; c=relaxed/simple; bh=80vqqJwO0Gr6DolpD81dm15XrGbYI41TQwBS2BueRnQ=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=GQL27I92PbH74dZRR2hYLxREM3CZVccWKgMzqWvkPH2MGrIQxdqzEW3alVb+vtRr3kfyGXShI4qIW8gzgfZyavZap6MPC5Y3H9x1BPlV1BqVElTaYtUB20kJwiThQqrOPlScenvjmqYt/ZUXL1VmadzKcaK6hgdPycXymaOru8Y= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=e/BLKacw; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="e/BLKacw" Received: by smtp.kernel.org (Postfix) with ESMTPSA id CF64DC4CEDD; Wed, 26 Feb 2025 02:23:54 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1740536634; bh=80vqqJwO0Gr6DolpD81dm15XrGbYI41TQwBS2BueRnQ=; h=From:To:Cc:Subject:Date:Reply-to:From; b=e/BLKacwpkQjXhapVtvJSCqpJ6FgZD6fgzRfEbYxEZmKibcA+Ng8cGh6vG33gO741 +2Rwo6WVhFFoM0v3M3m4eYWkuvUvJfC7/Eh9IoGRqcaSVVA9DmzlpjJqJEU/Ojq34u 6Eu1hnSO43kGV5EPM/VMNe1V418B8SQdKAu6jy10= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2022-49577: udp: Fix a data-race around sysctl_udp_l3mdev_accept. Date: Wed, 26 Feb 2025 03:22:20 +0100 Message-ID: <2025022607-CVE-2022-49577-da62@gregkh> X-Mailer: git-send-email 2.48.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2563; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=80vqqJwO0Gr6DolpD81dm15XrGbYI41TQwBS2BueRnQ=; b=owGbwMvMwCRo6H6F97bub03G02pJDOn7qs4/Fr16Pk6ALUExJXRrec36+kvT17d6hyTGSO7RN HJ/ID2/I5aFQZCJQVZMkeXLNp6j+ysOKXoZ2p6GmcPKBDKEgYtTACain8Qwv0LspeHnKf/dzznv uvLuNefHmW4LVjPM4bxcZLb27Y87Uzpig87zJqSyHH70CgA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: udp: Fix a data-race around sysctl_udp_l3mdev_accept. While reading sysctl_udp_l3mdev_accept, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. The Linux kernel CVE team has assigned CVE-2022-49577 to this issue. Affected and fixed versions =========================== Issue introduced in 4.11 with commit 63a6fff353d01da5a22b72670c434bf12fa0e3b8 and fixed in 5.4.208 with commit f39b03bd727a8fea62e82f10fe2e0d753b9930ff Issue introduced in 4.11 with commit 63a6fff353d01da5a22b72670c434bf12fa0e3b8 and fixed in 5.10.134 with commit fcaef69c79ec222e55643e666b80b221e70fa6a8 Issue introduced in 4.11 with commit 63a6fff353d01da5a22b72670c434bf12fa0e3b8 and fixed in 5.15.58 with commit 3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c Issue introduced in 4.11 with commit 63a6fff353d01da5a22b72670c434bf12fa0e3b8 and fixed in 5.18.15 with commit cb0d28934ca10f99c47e2c6f451405d6c954fe48 Issue introduced in 4.11 with commit 63a6fff353d01da5a22b72670c434bf12fa0e3b8 and fixed in 5.19 with commit 3d72bb4188c708bb16758c60822fc4dda7a95174 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49577 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: include/net/udp.h Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/f39b03bd727a8fea62e82f10fe2e0d753b9930ff https://git.kernel.org/stable/c/fcaef69c79ec222e55643e666b80b221e70fa6a8 https://git.kernel.org/stable/c/3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c https://git.kernel.org/stable/c/cb0d28934ca10f99c47e2c6f451405d6c954fe48 https://git.kernel.org/stable/c/3d72bb4188c708bb16758c60822fc4dda7a95174