ByteOS Network

Vulnerability Details :

CVE-2022-49579

Assigner-Linux

Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published At-26 Feb, 2025 | 02:23

Updated At-04 May, 2025 | 08:41

ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. While reading sysctl_fib_multipath_hash_policy, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Linux

Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published At:26 Feb, 2025 | 02:23

Updated At:04 May, 2025 | 08:41

▼CVE Numbering Authority (CNA)

ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

Affected Products

Vendor

Linux Kernel Organization, Inc

Product

Linux

Repo

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Program Files

drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c
net/ipv4/route.c

Default Status

unaffected

Versions

Affected

From bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 before 21fb844bc1dc1461f5038d655aa1a14f39e13049 (git)
From bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 before 918ee6592ab9a2ff5316d06cfd4aaef60ccabec6 (git)
From bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 before 7998c12a08c97cc26660532c9f90a34bd7d8da5a (git)

Vendor

Linux Kernel Organization, Inc

Product

Linux

Repo

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Program Files

drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c
net/ipv4/route.c

Default Status

affected

Versions

Affected

4.12

Unaffected

From 0 before 4.12 (semver)
From 5.15.58 through 5.15.* (semver)
From 5.18.15 through 5.18.* (semver)
From 5.19 through * (original_commit_for_fix)

References

Hyperlink	Resource
https://git.kernel.org/stable/c/21fb844bc1dc1461f5038d655aa1a14f39e13049	N/A
https://git.kernel.org/stable/c/918ee6592ab9a2ff5316d06cfd4aaef60ccabec6	N/A
https://git.kernel.org/stable/c/7998c12a08c97cc26660532c9f90a34bd7d8da5a	N/A

Hyperlink: https://git.kernel.org/stable/c/21fb844bc1dc1461f5038d655aa1a14f39e13049

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/918ee6592ab9a2ff5316d06cfd4aaef60ccabec6

Resource: N/A

Hyperlink: https://git.kernel.org/stable/c/7998c12a08c97cc26660532c9f90a34bd7d8da5a

Resource: N/A

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published At:26 Feb, 2025 | 07:01

Updated At:10 Mar, 2025 | 20:23

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	4.7	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 4.7

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CPE Matches

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 4.12(inclusive) to 5.15.58(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>Versions from 5.16(inclusive) to 5.18.15(exclusive)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>5.19

cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>5.19

cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>5.19

cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>5.19

cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>5.19

cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>5.19

cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>5.19

cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-362	Primary	nvd@nist.gov

CWE ID: CWE-362

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://git.kernel.org/stable/c/21fb844bc1dc1461f5038d655aa1a14f39e13049	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/7998c12a08c97cc26660532c9f90a34bd7d8da5a	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch
https://git.kernel.org/stable/c/918ee6592ab9a2ff5316d06cfd4aaef60ccabec6	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Patch

Hyperlink: https://git.kernel.org/stable/c/21fb844bc1dc1461f5038d655aa1a14f39e13049

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Resource:

Patch

Hyperlink: https://git.kernel.org/stable/c/7998c12a08c97cc26660532c9f90a34bd7d8da5a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Resource:

Patch

Hyperlink: https://git.kernel.org/stable/c/918ee6592ab9a2ff5316d06cfd4aaef60ccabec6

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Resource:

Patch

CVE-2022-49579

Credits

ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Affected

Unaffected

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs