// For flags

CVE-2022-49344

af_unix: Fix a data-race in unix_dgram_peer_wake_me().

Severity Score

4.7
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix a data-race in unix_dgram_peer_wake_me(). unix_dgram_poll() calls unix_dgram_peer_wake_me() without `other`'s
lock held and check if its receive queue is full. Here we need to
use unix_recvq_full_lockless() instead of unix_recvq_full(), otherwise
KCSAN will report a data-race.

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix a data-race in unix_dgram_peer_wake_me(). unix_dgram_poll() calls unix_dgram_peer_wake_me() without `other`'s lock held and check if its receive queue is full. Here we need to use unix_recvq_full_lockless() instead of unix_recvq_full(), otherwise KCSAN will report a data-race.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2025-02-26 CVE Reserved
  • 2025-02-26 CVE Published
  • 2025-02-26 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CAPEC
References (20)
URL Tag Source
https://git.kernel.org/stable/c/7d267278a9ece963d77eefec61630223fce08c6c Vuln. Introduced
https://git.kernel.org/stable/c/60bc010667ef06e0fb08d5ec599c0977adc2ac72 Vuln. Introduced
https://git.kernel.org/stable/c/a3b0f6e8a21ef02f69a15abac440572d8cde8c2a Vuln. Introduced
https://git.kernel.org/stable/c/ec54d5ae9d298abf01c273233de9f2bc25d80475 Vuln. Introduced
https://git.kernel.org/stable/c/da8db0830a2ce63f628150307a01a315f5081202 Vuln. Introduced
https://git.kernel.org/stable/c/9964b4c4ee925b2910723e509abd7241cff1ef84 Vuln. Introduced
https://git.kernel.org/stable/c/9d054f57adc981a5f503d5eb9b259aa450b90dc5 Vuln. Introduced
https://git.kernel.org/stable/c/72032798034d921ed565e3bf8dfdc3098f6473e2 Vuln. Introduced
https://git.kernel.org/stable/c/5c77e26862ce604edea05b3442ed765e9756fe0f Vuln. Introduced
https://git.kernel.org/stable/c/bad967fdd8ecbdd171f5f243657be033d2d081a7 Vuln. Introduced
https://git.kernel.org/stable/c/58a6a46a036ce81a2a8ecaa6fc1537c894349e3f Vuln. Introduced
URL Date SRC
URL Date SRC
https://git.kernel.org/stable/c/95f0ba806277733bf6024e23e27e1be773701cca 2022-06-14
https://git.kernel.org/stable/c/556720013c36c193d9cbfb06e7b33e51f0c39fbf 2022-06-14
https://git.kernel.org/stable/c/c61848500a3fd6867dfa4834b8c7f97133eceb9f 2022-06-14
https://git.kernel.org/stable/c/c926ae58f24f7bd55aa2ea4add9f952032507913 2022-06-14
https://git.kernel.org/stable/c/71e8bfc7f838cabc60cba24e09ca84c4f8321ab2 2022-06-14
https://git.kernel.org/stable/c/8801eb3ccd2e4e3b1a01449383e3321ae6dbd9d6 2022-06-14
https://git.kernel.org/stable/c/662a80946ce13633ae90a55379f1346c10f0c432 2022-06-07
URL Date SRC
https://access.redhat.com/security/cve/CVE-2022-49344 2023-11-07
https://bugzilla.redhat.com/show_bug.cgi?id=2347694 2023-11-07
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.4 < 4.19.247
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.4 < 4.19.247"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.4 < 5.4.198
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.4 < 5.4.198"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.4 < 5.10.122
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.4 < 5.10.122"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.4 < 5.15.47
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.4 < 5.15.47"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.4 < 5.17.15
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.4 < 5.17.15"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.4 < 5.18.4
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.4 < 5.18.4"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 >= 4.4 < 5.19
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.4 < 5.19"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 2.6.32.70
Search vendor "Linux" for product "Linux Kernel" and version "2.6.32.70"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 3.2.75
Search vendor "Linux" for product "Linux Kernel" and version "3.2.75"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 3.4.111
Search vendor "Linux" for product "Linux Kernel" and version "3.4.111"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 3.10.95
Search vendor "Linux" for product "Linux Kernel" and version "3.10.95"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 3.12.52
Search vendor "Linux" for product "Linux Kernel" and version "3.12.52"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 3.14.59
Search vendor "Linux" for product "Linux Kernel" and version "3.14.59"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 3.18.26
Search vendor "Linux" for product "Linux Kernel" and version "3.18.26"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 4.1.15
Search vendor "Linux" for product "Linux Kernel" and version "4.1.15"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 4.2.8
Search vendor "Linux" for product "Linux Kernel" and version "4.2.8"
en
Affected
Linux
Search vendor "Linux"
 Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
 4.3.3
Search vendor "Linux" for product "Linux Kernel" and version "4.3.3"
en
Affected