CVE-2022-49629

Source
https://cve.org/CVERecord?id=CVE-2022-49629
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49629.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49629
Downstream
Published
2025-02-26T02:23:42.768Z
Modified
2026-03-10T21:50:35.549808Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
nexthop: Fix data-races around nexthop_compat_mode.
Details

In the Linux kernel, the following vulnerability has been resolved:

nexthop: Fix data-races around nexthopcompatmode.

While reading nexthopcompatmode, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49629.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
4f80116d3df3b23ee4b83ea8557629e1799bc230
Fixed
a51040d4b120f3520df64fb0b9c63b31d69bea9b
Fixed
0d17723afea3ae8c9f245c9bbd2ba5945b77e812
Fixed
ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd
Fixed
bdf00bf24bef9be1ca641a6390fd5487873e0d2e

Affected versions

v5.*
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.10.1
v5.10.10
v5.10.100
v5.10.101
v5.10.102
v5.10.103
v5.10.104
v5.10.105
v5.10.106
v5.10.107
v5.10.108
v5.10.109
v5.10.11
v5.10.110
v5.10.111
v5.10.112
v5.10.113
v5.10.114
v5.10.115
v5.10.116
v5.10.117
v5.10.118
v5.10.119
v5.10.12
v5.10.120
v5.10.121
v5.10.122
v5.10.123
v5.10.124
v5.10.125
v5.10.126
v5.10.127
v5.10.128
v5.10.129
v5.10.13
v5.10.130
v5.10.131
v5.10.14
v5.10.15
v5.10.16
v5.10.17
v5.10.18
v5.10.19
v5.10.2
v5.10.20
v5.10.21
v5.10.22
v5.10.23
v5.10.24
v5.10.25
v5.10.26
v5.10.27
v5.10.28
v5.10.29
v5.10.3
v5.10.30
v5.10.31
v5.10.32
v5.10.33
v5.10.34
v5.10.35
v5.10.36
v5.10.37
v5.10.38
v5.10.39
v5.10.4
v5.10.40
v5.10.41
v5.10.42
v5.10.43
v5.10.44
v5.10.45
v5.10.46
v5.10.47
v5.10.48
v5.10.49
v5.10.5
v5.10.50
v5.10.51
v5.10.52
v5.10.53
v5.10.54
v5.10.55
v5.10.56
v5.10.57
v5.10.58
v5.10.59
v5.10.6
v5.10.60
v5.10.61
v5.10.62
v5.10.63
v5.10.64
v5.10.65
v5.10.66
v5.10.67
v5.10.68
v5.10.69
v5.10.7
v5.10.70
v5.10.71
v5.10.72
v5.10.73
v5.10.74
v5.10.75
v5.10.76
v5.10.77
v5.10.78
v5.10.79
v5.10.8
v5.10.80
v5.10.81
v5.10.82
v5.10.83
v5.10.84
v5.10.85
v5.10.86
v5.10.87
v5.10.88
v5.10.89
v5.10.9
v5.10.90
v5.10.91
v5.10.92
v5.10.93
v5.10.94
v5.10.95
v5.10.96
v5.10.97
v5.10.98
v5.10.99
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.6
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.10
v5.18.11
v5.18.12
v5.18.2
v5.18.3
v5.18.4
v5.18.5
v5.18.6
v5.18.7
v5.18.8
v5.18.9
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.7
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

Database specific

vanir_signatures
[
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/route.c",
            "function": "rt6_fill_node"
        },
        "id": "CVE-2022-49629-078f8836",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a51040d4b120f3520df64fb0b9c63b31d69bea9b",
        "digest": {
            "function_hash": "171421220050724451005341058875687596005",
            "length": 4245.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/fib_semantics.c",
            "function": "fib_dump_info"
        },
        "id": "CVE-2022-49629-0af4998a",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd",
        "digest": {
            "function_hash": "85196264694198295012493687606521996859",
            "length": 2272.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c",
            "function": "__remove_nexthop_fib"
        },
        "id": "CVE-2022-49629-151deaf9",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd",
        "digest": {
            "function_hash": "58172709530043155937567004272518758000",
            "length": 440.0
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c"
        },
        "id": "CVE-2022-49629-1bde2c98",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd",
        "digest": {
            "line_hashes": [
                "312850766508924898484920606251438535562",
                "69387967483250707370293953785461081613",
                "211456181674493895341077675366049920055",
                "177018701058907900023231398647531518330",
                "145224466893887800334032801411824824385",
                "236294777010550588554753441969832268350",
                "113885715751555972997809803649437868104",
                "125634441906028780615735303915758294045"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/route.c"
        },
        "id": "CVE-2022-49629-1d4a8723",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d17723afea3ae8c9f245c9bbd2ba5945b77e812",
        "digest": {
            "line_hashes": [
                "31311571141780061399372805573122246922",
                "244916379881520883722904117981151687418",
                "176931739328637825939810505444468359744",
                "14364602158549086040637189795010259330"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/fib_semantics.c"
        },
        "id": "CVE-2022-49629-280bc59f",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d17723afea3ae8c9f245c9bbd2ba5945b77e812",
        "digest": {
            "line_hashes": [
                "201310386640512525289554275743456134598",
                "284674301528169372568871456316072729290",
                "131376873881432169704278301636191064301",
                "167935410272110404486855135646090798723"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c",
            "function": "insert_nexthop"
        },
        "id": "CVE-2022-49629-2871ccce",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a51040d4b120f3520df64fb0b9c63b31d69bea9b",
        "digest": {
            "function_hash": "258139049260085355881561603814426217502",
            "length": 1192.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c",
            "function": "insert_nexthop"
        },
        "id": "CVE-2022-49629-302cf299",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d17723afea3ae8c9f245c9bbd2ba5945b77e812",
        "digest": {
            "function_hash": "193680905582047273145076020299205694859",
            "length": 1703.0
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/route.c"
        },
        "id": "CVE-2022-49629-3318bc2d",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdf00bf24bef9be1ca641a6390fd5487873e0d2e",
        "digest": {
            "line_hashes": [
                "31311571141780061399372805573122246922",
                "244916379881520883722904117981151687418",
                "176931739328637825939810505444468359744",
                "14364602158549086040637189795010259330"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/route.c"
        },
        "id": "CVE-2022-49629-37499263",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd",
        "digest": {
            "line_hashes": [
                "31311571141780061399372805573122246922",
                "244916379881520883722904117981151687418",
                "176931739328637825939810505444468359744",
                "14364602158549086040637189795010259330"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c",
            "function": "__remove_nexthop_fib"
        },
        "id": "CVE-2022-49629-405b1eca",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d17723afea3ae8c9f245c9bbd2ba5945b77e812",
        "digest": {
            "function_hash": "58172709530043155937567004272518758000",
            "length": 440.0
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/route.c"
        },
        "id": "CVE-2022-49629-40e63a55",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a51040d4b120f3520df64fb0b9c63b31d69bea9b",
        "digest": {
            "line_hashes": [
                "31311571141780061399372805573122246922",
                "244916379881520883722904117981151687418",
                "176931739328637825939810505444468359744",
                "14364602158549086040637189795010259330"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c",
            "function": "insert_nexthop"
        },
        "id": "CVE-2022-49629-4176fb8b",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdf00bf24bef9be1ca641a6390fd5487873e0d2e",
        "digest": {
            "function_hash": "193680905582047273145076020299205694859",
            "length": 1703.0
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c"
        },
        "id": "CVE-2022-49629-467dca3a",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d17723afea3ae8c9f245c9bbd2ba5945b77e812",
        "digest": {
            "line_hashes": [
                "312850766508924898484920606251438535562",
                "69387967483250707370293953785461081613",
                "211456181674493895341077675366049920055",
                "177018701058907900023231398647531518330",
                "145224466893887800334032801411824824385",
                "236294777010550588554753441969832268350",
                "113885715751555972997809803649437868104",
                "125634441906028780615735303915758294045"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/fib_semantics.c"
        },
        "id": "CVE-2022-49629-496e8637",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdf00bf24bef9be1ca641a6390fd5487873e0d2e",
        "digest": {
            "line_hashes": [
                "201310386640512525289554275743456134598",
                "284674301528169372568871456316072729290",
                "131376873881432169704278301636191064301",
                "167935410272110404486855135646090798723"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/route.c",
            "function": "rt6_fill_node"
        },
        "id": "CVE-2022-49629-6fa0a99e",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d17723afea3ae8c9f245c9bbd2ba5945b77e812",
        "digest": {
            "function_hash": "2770666345357129489347499172736471249",
            "length": 4481.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c",
            "function": "insert_nexthop"
        },
        "id": "CVE-2022-49629-84b70bc8",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd",
        "digest": {
            "function_hash": "193680905582047273145076020299205694859",
            "length": 1703.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/fib_semantics.c",
            "function": "fib_dump_info"
        },
        "id": "CVE-2022-49629-8f243097",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdf00bf24bef9be1ca641a6390fd5487873e0d2e",
        "digest": {
            "function_hash": "162916351970850499514527104021258600224",
            "length": 2286.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c",
            "function": "__remove_nexthop_fib"
        },
        "id": "CVE-2022-49629-90e74dc4",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a51040d4b120f3520df64fb0b9c63b31d69bea9b",
        "digest": {
            "function_hash": "58172709530043155937567004272518758000",
            "length": 440.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/route.c",
            "function": "rt6_fill_node"
        },
        "id": "CVE-2022-49629-9ff35ccd",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdf00bf24bef9be1ca641a6390fd5487873e0d2e",
        "digest": {
            "function_hash": "2770666345357129489347499172736471249",
            "length": 4481.0
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/fib_semantics.c"
        },
        "id": "CVE-2022-49629-a518d42b",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd",
        "digest": {
            "line_hashes": [
                "201310386640512525289554275743456134598",
                "284674301528169372568871456316072729290",
                "131376873881432169704278301636191064301",
                "167935410272110404486855135646090798723"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c"
        },
        "id": "CVE-2022-49629-af1f5bd6",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a51040d4b120f3520df64fb0b9c63b31d69bea9b",
        "digest": {
            "line_hashes": [
                "312850766508924898484920606251438535562",
                "69387967483250707370293953785461081613",
                "211456181674493895341077675366049920055",
                "177018701058907900023231398647531518330",
                "145224466893887800334032801411824824385",
                "236294777010550588554753441969832268350",
                "113885715751555972997809803649437868104",
                "125634441906028780615735303915758294045"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/fib_semantics.c",
            "function": "fib_dump_info"
        },
        "id": "CVE-2022-49629-baca4791",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a51040d4b120f3520df64fb0b9c63b31d69bea9b",
        "digest": {
            "function_hash": "259824032878471834935438914868939568455",
            "length": 2192.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv6/route.c",
            "function": "rt6_fill_node"
        },
        "id": "CVE-2022-49629-cf3fd5b4",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae3054f6fbccc90f14ecd6cf9b2c09a2401c64fd",
        "digest": {
            "function_hash": "2770666345357129489347499172736471249",
            "length": 4481.0
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c"
        },
        "id": "CVE-2022-49629-d59be3a8",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdf00bf24bef9be1ca641a6390fd5487873e0d2e",
        "digest": {
            "line_hashes": [
                "312850766508924898484920606251438535562",
                "69387967483250707370293953785461081613",
                "211456181674493895341077675366049920055",
                "177018701058907900023231398647531518330",
                "145224466893887800334032801411824824385",
                "236294777010550588554753441969832268350",
                "113885715751555972997809803649437868104",
                "125634441906028780615735303915758294045"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/fib_semantics.c",
            "function": "fib_dump_info"
        },
        "id": "CVE-2022-49629-deeaf573",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0d17723afea3ae8c9f245c9bbd2ba5945b77e812",
        "digest": {
            "function_hash": "85196264694198295012493687606521996859",
            "length": 2272.0
        }
    },
    {
        "signature_type": "Function",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/nexthop.c",
            "function": "__remove_nexthop_fib"
        },
        "id": "CVE-2022-49629-ecf0d97a",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bdf00bf24bef9be1ca641a6390fd5487873e0d2e",
        "digest": {
            "function_hash": "58172709530043155937567004272518758000",
            "length": 440.0
        }
    },
    {
        "signature_type": "Line",
        "signature_version": "v1",
        "target": {
            "file": "net/ipv4/fib_semantics.c"
        },
        "id": "CVE-2022-49629-ef0e580b",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a51040d4b120f3520df64fb0b9c63b31d69bea9b",
        "digest": {
            "line_hashes": [
                "201310386640512525289554275743456134598",
                "284674301528169372568871456316072729290",
                "131376873881432169704278301636191064301",
                "167935410272110404486855135646090798723"
            ],
            "threshold": 0.9
        }
    }
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49629.json"