In the Linux kernel, the following vulnerability has been resolved:
afunix: Fix a data-race in unixdgrampeerwake_me().
unixdgrampoll() calls unixdgrampeerwakeme() without other
's
lock held and check if its receive queue is full. Here we need to
use unixrecvqfulllockless() instead of unixrecvq_full(), otherwise
KCSAN will report a data-race.
{ "vanir_signatures": [ { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/unix/af_unix.c" }, "deprecated": false, "digest": { "line_hashes": [ "150858837806437001991924019976799397897", "280146864915837248184356347893197454824", "222053998868946284175455253559933288758", "27292363109374470041029924904756421665" ], "threshold": 0.9 }, "id": "CVE-2022-49344-1dde3a4f", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@662a80946ce13633ae90a55379f1346c10f0c432" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/unix/af_unix.c" }, "deprecated": false, "digest": { "line_hashes": [ "150858837806437001991924019976799397897", "280146864915837248184356347893197454824", "222053998868946284175455253559933288758", "27292363109374470041029924904756421665" ], "threshold": 0.9 }, "id": "CVE-2022-49344-2da8219c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8801eb3ccd2e4e3b1a01449383e3321ae6dbd9d6" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/unix/af_unix.c" }, "deprecated": false, "digest": { "line_hashes": [ "150858837806437001991924019976799397897", "280146864915837248184356347893197454824", "222053998868946284175455253559933288758", "27292363109374470041029924904756421665" ], "threshold": 0.9 }, "id": "CVE-2022-49344-4c80584d", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c61848500a3fd6867dfa4834b8c7f97133eceb9f" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/unix/af_unix.c" }, "deprecated": false, "digest": { "line_hashes": [ "150858837806437001991924019976799397897", "280146864915837248184356347893197454824", "222053998868946284175455253559933288758", "27292363109374470041029924904756421665" ], "threshold": 0.9 }, "id": "CVE-2022-49344-5041d030", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@95f0ba806277733bf6024e23e27e1be773701cca" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/unix/af_unix.c" }, "deprecated": false, "digest": { "line_hashes": [ "150858837806437001991924019976799397897", "280146864915837248184356347893197454824", "222053998868946284175455253559933288758", "27292363109374470041029924904756421665" ], "threshold": 0.9 }, "id": "CVE-2022-49344-8e176af5", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71e8bfc7f838cabc60cba24e09ca84c4f8321ab2" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/unix/af_unix.c" }, "deprecated": false, "digest": { "line_hashes": [ "150858837806437001991924019976799397897", "280146864915837248184356347893197454824", "222053998868946284175455253559933288758", "27292363109374470041029924904756421665" ], "threshold": 0.9 }, "id": "CVE-2022-49344-e16e088e", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c926ae58f24f7bd55aa2ea4add9f952032507913" }, { "signature_version": "v1", "signature_type": "Line", "target": { "file": "net/unix/af_unix.c" }, "deprecated": false, "digest": { "line_hashes": [ "150858837806437001991924019976799397897", "280146864915837248184356347893197454824", "222053998868946284175455253559933288758", "27292363109374470041029924904756421665" ], "threshold": 0.9 }, "id": "CVE-2022-49344-fd6c3aef", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@556720013c36c193d9cbfb06e7b33e51f0c39fbf" } ] }