In the Linux kernel, the following vulnerability has been resolved:
afunix: Fix a data-race in unixdgrampeerwake_me().
unixdgrampoll() calls unixdgrampeerwakeme() without other's
lock held and check if its receive queue is full. Here we need to
use unixrecvqfulllockless() instead of unixrecvq_full(), otherwise
KCSAN will report a data-race.
[
{
"digest": {
"line_hashes": [
"150858837806437001991924019976799397897",
"280146864915837248184356347893197454824",
"222053998868946284175455253559933288758",
"27292363109374470041029924904756421665"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8801eb3ccd2e4e3b1a01449383e3321ae6dbd9d6",
"target": {
"file": "net/unix/af_unix.c"
},
"id": "CVE-2022-49344-2da8219c",
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"150858837806437001991924019976799397897",
"280146864915837248184356347893197454824",
"222053998868946284175455253559933288758",
"27292363109374470041029924904756421665"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c61848500a3fd6867dfa4834b8c7f97133eceb9f",
"target": {
"file": "net/unix/af_unix.c"
},
"id": "CVE-2022-49344-4c80584d",
"signature_type": "Line"
}
]