CVE-2022-49590

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49590
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49590.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49590
Downstream
Related
Published
2025-02-26T02:23:23Z
Modified
2026-08-12T03:51:11Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
igmp: Fix data-races around sysctl_igmp_llm_reports.
Details

In the Linux kernel, the following vulnerability has been resolved:

igmp: Fix data-races around sysctl_igmp_llm_reports.

While reading sysctl_igmp_llm_reports, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

This test can be packed into a helper, so such changes will be in the follow-up series after net is merged into net-next.

if (ipv4_is_local_multicast(pmc->multiaddr) && !READ_ONCE(net->ipv4.sysctl_igmp_llm_reports))

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49590.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
df2cf4a78e488d26728590cb3c6b4fe4c4862c77
Fixed
a84b4afaca2573ed3aed1f8854aefe3ca5a82e72
Fixed
d77969e7d4ccc26bf1f414a39ef35050a83ba6d5
Fixed
ed876e99ccf417b8bd7fd8408ba5e8b008e46cc8
Fixed
1656ecaddf90e2a070ec2d2404cdae3edf80faca
Fixed
473aad9ad57ff760005377e6f45a2ad4210e08ce
Fixed
260446eb8e5541402b271343a4516f2b33dec1e4
Fixed
46307adceb67bdf2ec38408dd9cebc378a6b5c46
Fixed
f6da2267e71106474fbc0943dc24928b9cb79119

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49590.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.0
Fixed
4.9.325
Type
ECOSYSTEM
Events
Introduced
4.10.0
Fixed
4.14.290
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.254
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.208
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.134
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.58
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.18.15

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49590.json"