Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2022-49631
CVE-2022-49631:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2022-49631 is a data race vulnerability discovered in the Linux kernel affecting the sysctlrawl3mdevaccept functionality. The vulnerability occurs when reading sysctlrawl3mdevaccept, as it can be changed concurrently, leading to potential race conditions (Kernel Git).
Technical details
The vulnerability exists in the raw socket handling code of the Linux kernel, specifically in the rawskbounddeveq function within include/net/raw.h. The issue stems from a missing READONCE() operation when accessing the sysctlrawl3mdevaccept variable, which could lead to data races during concurrent access (Kernel Git).
Impact
The data race condition could potentially affect the proper functioning of raw socket lookups with VRFs (Virtual Routing and Forwarding) in the Linux kernel, potentially leading to inconsistent network behavior (Debian Security).
Mitigation and workarounds
The issue has been fixed by adding READONCE() to the reader of sysctlrawl3mdevaccept. The fix has been implemented in various Linux kernel versions, including 5.10.234-1 for Debian bullseye and 6.1.128-1 for Debian bookworm (Debian Security).
Additional resources
Source: This report was generated using AI
Related Linux Kernel vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management