CVE-2022-49587
tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
MEDIUM
4.7
CVSS Score
Published: February 26, 2025 at 02:23 AM UTC
Updated: June 17, 2026 at 05:18 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM4.7
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. While reading sysctl_tcp_notsent_lowat, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.12 ≤ v < 4.14.2903.12 ≤ v < 4.19.2543.12 ≤ v < 4.9.3253.12 ≤ v < 5.10.1343.12 ≤ v < 5.15.583.12 ≤ v < 5.18.153.12 ≤ v < 5.193.12 ≤ v < 5.4.2084.10 ≤ v < 4.14.2904.15 ≤ v < 4.19.2544.20 ≤ v < 5.4.2085.11 ≤ v < 5.15.585.16 ≤ v < 5.18.155.5 ≤ v < 5.10.1345.19 rc15.19 rc25.19 rc35.19 rc45.19 rc55.19 rc65.19 rc7c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36
Vendor states this is fixed in 0f75343584ee474303e17efe0610bdd170af1d13 (fixed)
Vendor states this is fixed in 55be873695ed8912eb77ff46d1d1cadf028bd0f3 (fixed)
Vendor states this is fixed in 62e56cfeb2ae4b53ae9ca24c80f54093250ce64a (fixed)
Vendor states this is fixed in 80d4d0c461674eea87f0977e12a2ecd334b9b79c (fixed)
Vendor states this is fixed in 91e21df688f8a75255ca9c459da39ac96300113a (fixed)
Vendor states this is fixed in c1b85c5a34294f7444c13bf828e0e84b0a0eed85 (fixed)
Vendor states this is fixed in e9362a993886613ef0284c2a4911c6017c97d803 (fixed)
Vendor states this is fixed in fd6f1284e380c377932186042ff0b5c987fb2b92 (fixed)
Vendor states this is fixed in 3.12 (unaffected)
Vendor states this is fixed in 4.14.290 (unaffected)
Vendor states this is fixed in 4.19.254 (unaffected)
Vendor states this is fixed in 4.9.325 (unaffected)
Vendor states this is fixed in 5.10.134 (unaffected)
Vendor states this is fixed in 5.15.58 (unaffected)
Vendor states this is fixed in 5.18.15 (unaffected)
Vendor states this is fixed in 5.19 (unaffected)
Vendor states this is fixed in 5.4.208 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/0f75343584ee474303e17efe0610bdd170af1d13
- https://git.kernel.org/stable/c/55be873695ed8912eb77ff46d1d1cadf028bd0f3
- https://git.kernel.org/stable/c/62e56cfeb2ae4b53ae9ca24c80f54093250ce64a
- https://git.kernel.org/stable/c/80d4d0c461674eea87f0977e12a2ecd334b9b79c
- https://git.kernel.org/stable/c/91e21df688f8a75255ca9c459da39ac96300113a
References (8)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0f75343584ee474303e17efe0610bdd170af1d13Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/55be873695ed8912eb77ff46d1d1cadf028bd0f3Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/62e56cfeb2ae4b53ae9ca24c80f54093250ce64aPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/80d4d0c461674eea87f0977e12a2ecd334b9b79cPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/91e21df688f8a75255ca9c459da39ac96300113aPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c1b85c5a34294f7444c13bf828e0e84b0a0eed85Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e9362a993886613ef0284c2a4911c6017c97d803Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fd6f1284e380c377932186042ff0b5c987fb2b92SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
4.7MEDIUMCISA-ADP
- Attack Vector
- LOCAL
- Complexity
- HIGH
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-362
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card