From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 2F56F218ADD for ; Wed, 26 Feb 2025 02:23:57 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536637; cv=none; b=KLYkq1dUZr0qymo6rYztjmv/nvnoNdtxm2bOhs0jNgArhJc0v0KH/cRav4PcQIuQTu2BxIYIvK27lN6wAjZVQcMzXO2iu0vqs6e3SmWkYthItF3B+GEjU0z1byXczUPi4u0y9DGk03RILo9zN09lcoMwW0rWmekHVPa+lVFffbQ= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1740536637; c=relaxed/simple; bh=lCwZhIvO26JV6DTgx/XLDqZISRsRujCM8F7euks3rfA=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=cXUlp8z2PH8E5Xd+NIqcXIicRX79yV/O73Dw5jFCavoxoH/XuUdv0MPBFrG5/+9QxSiz4rHpMWmOO7HO9Ekoa3cn00mhdmniJiY5EWjmoC2GbNb8+cz7SkTx0YaSy6vZUOZ1DNsIOb1byAQWaIJeKAaxJ5xmRVFlw2DOsgPh5yM= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=Uhkd6DyA; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="Uhkd6DyA" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 019E5C4CEE6; Wed, 26 Feb 2025 02:23:56 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1740536637; bh=lCwZhIvO26JV6DTgx/XLDqZISRsRujCM8F7euks3rfA=; h=From:To:Cc:Subject:Date:Reply-to:From; b=Uhkd6DyAwNz8zQt/oYB/HFdXrEH7HMDB0v2rhq1OdVaqiToTugU+l0BizTowqTDk8 oMmMROTVw8fQXrRieoB43KJahPiHGqtKcJzXGid1vkEG5b4gjymuvyPXauf4OmDs65 7Aynmo1fSkY519/oL2eQA/83WKULmebBZQgqXq3A= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2022-49580: ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. Date: Wed, 26 Feb 2025 03:22:23 +0100 Message-ID: <2025022608-CVE-2022-49580-c398@gregkh> X-Mailer: git-send-email 2.48.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2579; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=lCwZhIvO26JV6DTgx/XLDqZISRsRujCM8F7euks3rfA=; b=owGbwMvMwCRo6H6F97bub03G02pJDOn7qi4wthxsVdxokNjr9eBe5e+pud5pTn5nsnYeDdJy8 MxNC1TuiGVhEGRikBVTZPmyjefo/opDil6Gtqdh5rAygQxh4OIUgIncEWOYpyW0Odxy5g3pxqJu rv9r2xYXXRZNZFgw5dycDcvWzRI+ej/3dNTZm89Ms2T+AwA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. While reading sysctl_fib_multipath_use_neigh, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader. The Linux kernel CVE team has assigned CVE-2022-49580 to this issue. Affected and fixed versions =========================== Issue introduced in 4.7 with commit a6db4494d218c2e559173661ee972e048dc04fdd and fixed in 5.4.208 with commit 6727f39e99e0f545d815edebb6c94228485427ec Issue introduced in 4.7 with commit a6db4494d218c2e559173661ee972e048dc04fdd and fixed in 5.10.134 with commit e045d672ba06e1d35bacb56374d350de0ac99066 Issue introduced in 4.7 with commit a6db4494d218c2e559173661ee972e048dc04fdd and fixed in 5.15.58 with commit b8d345db03b4deffb4f04219a51d3b1e94171b76 Issue introduced in 4.7 with commit a6db4494d218c2e559173661ee972e048dc04fdd and fixed in 5.18.15 with commit 14e996577ed2799a1ed6ffeb71c76d63acb28444 Issue introduced in 4.7 with commit a6db4494d218c2e559173661ee972e048dc04fdd and fixed in 5.19 with commit 87507bcb4f5de16bb419e9509d874f4db6c0ad0f Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2022-49580 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: net/ipv4/fib_semantics.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/6727f39e99e0f545d815edebb6c94228485427ec https://git.kernel.org/stable/c/e045d672ba06e1d35bacb56374d350de0ac99066 https://git.kernel.org/stable/c/b8d345db03b4deffb4f04219a51d3b1e94171b76 https://git.kernel.org/stable/c/14e996577ed2799a1ed6ffeb71c76d63acb28444 https://git.kernel.org/stable/c/87507bcb4f5de16bb419e9509d874f4db6c0ad0f