In the Linux kernel, the following vulnerability has been resolved:
udp: Fix a data-race around sysctludpl3mdev_accept.
While reading sysctludpl3mdevaccept, it can be changed concurrently. Thus, we need to add READONCE() to its reader.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcaef69c79ec222e55643e666b80b221e70fa6a8",
"target": {
"function": "udp_sk_bound_dev_eq",
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-00294a1b",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 291.0,
"function_hash": "240333879419010750295687723319840719795"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcaef69c79ec222e55643e666b80b221e70fa6a8",
"target": {
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-0ab69ca9",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"81956679481442089045692634817430241332",
"101997420409066006805284272270171841911",
"333178736132063405014151723577730355662",
"46989175625848297842783142506736177804"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb0d28934ca10f99c47e2c6f451405d6c954fe48",
"target": {
"function": "udp_sk_bound_dev_eq",
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-1e4035ec",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 291.0,
"function_hash": "240333879419010750295687723319840719795"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d72bb4188c708bb16758c60822fc4dda7a95174",
"target": {
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-20fc589b",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"81956679481442089045692634817430241332",
"101997420409066006805284272270171841911",
"333178736132063405014151723577730355662",
"46989175625848297842783142506736177804"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c",
"target": {
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-2d99d8e8",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"81956679481442089045692634817430241332",
"101997420409066006805284272270171841911",
"333178736132063405014151723577730355662",
"46989175625848297842783142506736177804"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f39b03bd727a8fea62e82f10fe2e0d753b9930ff",
"target": {
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-62e98b0b",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"81956679481442089045692634817430241332",
"101997420409066006805284272270171841911",
"333178736132063405014151723577730355662",
"46989175625848297842783142506736177804"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c",
"target": {
"function": "udp_sk_bound_dev_eq",
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-71cd24ac",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 291.0,
"function_hash": "240333879419010750295687723319840719795"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f39b03bd727a8fea62e82f10fe2e0d753b9930ff",
"target": {
"function": "udp_sk_bound_dev_eq",
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-7985ea32",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 291.0,
"function_hash": "240333879419010750295687723319840719795"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d72bb4188c708bb16758c60822fc4dda7a95174",
"target": {
"function": "udp_sk_bound_dev_eq",
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-8ac9b806",
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 291.0,
"function_hash": "240333879419010750295687723319840719795"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb0d28934ca10f99c47e2c6f451405d6c954fe48",
"target": {
"file": "include/net/udp.h"
},
"deprecated": false,
"id": "CVE-2022-49577-b86bfbc4",
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"81956679481442089045692634817430241332",
"101997420409066006805284272270171841911",
"333178736132063405014151723577730355662",
"46989175625848297842783142506736177804"
]
}
}
]