deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-49570
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

gpio: gpio-xilinx: Fix integer overflow

Current implementation is not able to configure more than 32 pins
due to incorrect data type. So type casting with unsigned long
to avoid it.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://git.kernel.org/stable/c/32c094a09d5829ad9b02cdf667569aefa8de0ea6; https://git.kernel.org/stable/c/6f16a[PII_REDACTED]dde420ee5ccbc4c95577aea6a; https://git.kernel.org/stable/c/e129e5486b981d324057e6986059f852658b0d00
CVE: CVE-2022-49571
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_max_reordering.

While reading sysctl_tcp_max_reordering, it can be changed
concurrently.  Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/[PII_REDACTED]08c801861bd54789d81421fa4c2928; https://git.kernel.org/stable/c/46deb91ac8a790286ad6d24cf92e7ab0ab2582bb; https://git.kernel.org/stable/c/50a1d3d097503a90cf84ebe120afcde37e9c33b3
CVE: CVE-2022-49572
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

While reading sysctl_tcp_slow_start_after_idle, it can be changed
concurrently.  Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/0e3f82a03ec8c3808e87283e[PII_REDACTED]706c9; https://git.kernel.org/stable/c/369d99c2b89f54473adcf9acdf40ea562b5a6e0e; https://git.kernel.org/stable/c/3b26e11b07a09b31247688bec61e2925d4a571b6
CVE: CVE-2022-49573
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_early_retrans.

While reading sysctl_tcp_early_retrans, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/11e8b013d16e5db63f8f76acceb5b86964098aaa; https://git.kernel.org/stable/c/488d3ad98ef7cddce7054193dbae6b4349c6807d; https://git.kernel.org/stable/c/5037ca9e4b169cc9aed0174d658c3d81fdaf8ea5
CVE: CVE-2022-49574
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_recovery.

While reading sysctl_tcp_recovery, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/52ee7f5c4811ce6be1becd14d38ba1f8a8a0df81; https://git.kernel.org/stable/c/92c35113c63306091df9211375eebd0abd8c2160; https://git.kernel.org/stable/c/a31e2d0cb5cfa2aae3144cac04f25031d5d20fb4
CVE: CVE-2022-49575
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.

While reading sysctl_tcp_thin_linear_timeouts, it can be changed
concurrently.  Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/404c53ccdebd11f96954f4070cffac8e0b4d5cb6; https://git.kernel.org/stable/c/492f3713b282c0e67e951cd804edd22eccc25412; https://git.kernel.org/stable/c/7c6f2a86ca590d5187a073d987e9599985fb1c7c
CVE: CVE-2022-49576
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.

While reading sysctl_fib_multipath_hash_fields, it can be changed
concurrently.  Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/36f5b86f309b3b11295d087cd7433f1c897caf94; https://git.kernel.org/stable/c/548d6678c4a3d43667e59686665f8674b82440a3; https://git.kernel.org/stable/c/8895a9c2ac76fb9d3922fed4fe092c8ec5e5cccc
CVE: CVE-2022-49577
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

udp: Fix a data-race around sysctl_udp_l3mdev_accept.

While reading sysctl_udp_l3mdev_accept, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/3d72bb4188c708bb16758c60822fc4dda7a95174; https://git.kernel.org/stable/c/3f2ac2d6511bb0652abf4d7388d65bb9ff1c641c; https://git.kernel.org/stable/c/cb0d28934ca10f99c47e2c6f451405d6c954fe48
CVE: CVE-2022-49578
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

ip: Fix data-races around sysctl_ip_prot_sock.

sysctl_ip_prot_sock is accessed concurrently, and there is always a chance
of data-race.  So, all readers and writers need some basic protection to
avoid load/store-tearing.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/95724fe897a4ecf2be51452ef96e[PII_REDACTED]64; https://git.kernel.org/stable/c/9add240f76af6d141d2eebd3a1558a0e503a993d; https://git.kernel.org/stable/c/9b55c20f83369dd54541d9ddbe3a018a8377f451
CVE: CVE-2022-49579
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.

While reading sysctl_fib_multipath_hash_policy, it can be changed
concurrently.  Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/21fb844bc1dc1461f5038d655aa1a14f39e13049; https://git.kernel.org/stable/c/7998c12a08c97cc26660532c9f90a34bd7d8da5a; https://git.kernel.org/stable/c/918ee6592ab9a2ff5316d06cfd4aaef60ccabec6
CVE: CVE-2022-49580
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.

While reading sysctl_fib_multipath_use_neigh, it can be changed
concurrently.  Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/14e996577ed2799a1ed6ffeb71c76d63acb28444; https://git.kernel.org/stable/c/6727f39e99e0f545d815edebb6c[PII_REDACTED]7ec; https://git.kernel.org/stable/c/87507bcb4f5de16bb419e9509d874f4db6c0ad0f
CVE: CVE-2022-49581
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

be2net: Fix buffer overflow in be_get_module_eeprom

be_cmd_read_port_transceiver_data assumes that it is given a buffer that
is at least PAGE_DATA_LEN long, or twice that if the module supports SFF
8472. However, this is not always the case.

Fix this by passing the desired offset and length to
be_cmd_read_port_transceiver_data so that we only copy the bytes once.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://git.kernel.org/stable/c/18043da94c023f3ef09c15017bdb04e8f695ef10; https://git.kernel.org/stable/c/665cbe91de2f7c97c51ca8fce39aae26477c1948; https://git.kernel.org/stable/c/8ff4f9df73e5c551a72ee6034886c17e8de6596d
CVE: CVE-2022-49582
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

net: dsa: fix NULL pointer dereference in dsa_port_reset_vlan_filtering

The "ds" iterator variable used in dsa_port_reset_vlan_filtering() ->
dsa_switch_for_each_port() overwrites the "dp" received as argument,
which is later used to call dsa_port_vlan_filtering() proper.

As a result, switches which do enter that code path (the ones with
vlan_filtering_is_global=true) will dereference an invalid dp in
dsa_port_reset_vlan_filtering() after leaving a VLAN-aware bridge.

Use a dedicated "other_dp" iterator variable to avoid this from
happening.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://git.kernel.org/stable/c/1699b4d502eda3c7ea4070debad3ee570b5091b1; https://git.kernel.org/stable/c/3240e12fe203a3a79b9814e83327106b770ed7b0
CVE: CVE-2022-49583
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

iavf: Fix handling of dummy receive descriptors

Fix memory leak caused by not handling dummy receive descriptor properly.
iavf_get_rx_buffer now sets the rx_buffer return value for dummy receive
descriptors. Without this patch, when the hardware writes a dummy
descriptor, iavf would not free the page allocated for the previous receive
buffer. This is an unlikely event but can still happen.

[Jesse: massaged commit message]
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://git.kernel.org/stable/c/2918419c06088f6709ceb543feb01752779ade4c; https://git.kernel.org/stable/c/6edb818732fc05fda495f5b3a749bd1cee01398b; https://git.kernel.org/stable/c/a9f49e0060301a9bfebeca76739158d0cf91cdf6
CVE: CVE-2022-49584
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero

It is possible to disable VFs while the PF driver is processing requests
from the VF driver.  This can result in a panic.

BUG: unable to handle kernel paging request at[PII_REDACTED]00106c
PGD 0 P4D 0
Oops: 0000 [#1] SMP NOPTI
CPU: 8 PID: 0 Comm: swapper/8 Kdump: loaded Tainted: G I      --------- -
Hardware name: Dell Inc. PowerEdge R740/06WXJT, BIOS 2.8.2 08/27/2020
RIP: 0010:ixgbe_msg_task+0x4c8/0x1690 [ixgbe]
Code: 00 00 48 8d 04 40 48 c1 e0 05 89 7c 24 24 89 fd 48 89 44 24 10 83 ff
01 0f 84 b8 04 00 00 4c 8b 64 24 10 4d 03 a5 48 22 00 00 <41> 80 7c 24 4c
00 0f 84 8a 03 00 00 0f b7 c7 83 f8 08 0f 84 8f 0a
RSP: 0018:ffffb337869f8df8 EFLAGS: 00010002
RAX: [PII_REDACTED] RBX: [PII_REDACTED] RCX:[PII_REDACTED]00002b
RDX: [PII_REDACTED] RSI: [PII_REDACTED] RDI: [PII_REDACTED]
RBP: [PII_REDACTED] R08: [PII_REDACTED] R09: [PII_REDACTED]
R10: 00006957d8f42832 R11: [PII_REDACTED] R12: [PII_REDACTED]
R13: ffff8a00e8978ac0 R14:[PII_REDACTED]00002b R15: ffff8a00e8979c80
FS:  [PII_REDACTED](0000) GS:ffff8a07dfd00000(0000) knlGS:[PII_REDACTED]0000
CS:  0010 DS: 0000 ES: 0000 CR0: [PII_REDACTED]
CR2:[PII_REDACTED]00106c CR3:[PII_REDACTED]e10004 CR4:[PII_REDACTED]7726e0
DR0: [PII_REDACTED] DR1: [PII_REDACTED] DR2: [PII_REDACTED]
DR3: [PII_REDACTED] DR6: 00000000fffe0ff0 DR7: [PII_REDACTED]
PKRU: 55555554
Call Trace:
 <IRQ>
 ? ttwu_do_wakeup+0x19/0x140
 ? try_to_wake_up+0x1cd/0x550
 ? ixgbevf_update_xcast_mode+0x71/0xc0 [ixgbevf]
 ixgbe_msix_other+0x17e/0x310 [ixgbe]
 __handle_irq_event_percpu+0x40/0x180
 handle_irq_event_percpu+0x30/0x80
 handle_irq_event+0x36/0x53
 handle_edge_irq+0x82/0x190
 handle_irq+0x1c/0x30
 do_IRQ+0x49/0xd0
 common_interrupt+0xf/0xf

This can be eventually be reproduced with the following script:

while :
do
    echo 63 > /sys/class/net/<devname>/device/sriov_numvfs
    sleep 1
    echo 0 > /sys/class/net/<devname>/device/sriov_numvfs
    sleep 1
done

Add lock when disabling SR-IOV to prevent process VF mailbox communication.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/031af9e617a6f51075d97e56fc9e712c7dde2508; https://git.kernel.org/stable/c/16f929a5e76fd047fd8697e1e568bdd7d771955c; https://git.kernel.org/stable/c/1e53834ce541d4fe271cdcca7703e50be0a44f8a
CVE: CVE-2022-49585
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.

While reading sysctl_tcp_fastopen_blackhole_timeout, it can be changed
concurrently.  Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/021266ec640c7a4527e6cd4b7349a512b351de1d; https://git.kernel.org/stable/c/0dc2f19d8c2636cebda7976b5ea40c6d69f0d891; https://git.kernel.org/stable/c/8afa5604e295046c02b79ccf9e2bbbf8d969d60e
CVE: CVE-2022-49586
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_fastopen.

While reading sysctl_tcp_fastopen, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/03da610696a32578fc4f986479341ce9d430df08; https://git.kernel.org/stable/c/22938534c611136f35e2ca545bb668073ca5ef49; https://git.kernel.org/stable/c/25d53d858a6c0b89a6e69e376c2a57c4f4c2c8cc
CVE: CVE-2022-49587
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_notsent_lowat.

While reading sysctl_tcp_notsent_lowat, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/0f75343584ee474303e17efe0610bdd170af1d13; https://git.kernel.org/stable/c/55be873695ed8912eb77ff46d1d1cadf028bd0f3; https://git.kernel.org/stable/c/62e56cfeb2ae4b53ae9ca24c80f54093250ce64a
CVE: CVE-2022-49588
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_migrate_req.

While reading sysctl_tcp_migrate_req, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/4177f545895b1da08447a80692f30617154efa6e; https://git.kernel.org/stable/c/6e569a11eea20a1ccebc3c4e6366bf0574a449e1; https://git.kernel.org/stable/c/fcf6c6d8aeffebca66f37b17ef1b57112e5e09c1
CVE: CVE-2022-49589
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

igmp: Fix data-races around sysctl_igmp_qrv.

While reading sysctl_igmp_qrv, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.

This test can be packed into a helper, so such changes will be in the
follow-up series after net is merged into net-next.

  qrv ?: READ_ONCE(net->ipv4.sysctl_igmp_qrv);
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/8ebcc62c738f68688ee7c6fec2efe5bc6d3d7e60; https://git.kernel.org/stable/c/9eeb3a7702998bdccbfcc37997b5dd9215b9a7f7; https://git.kernel.org/stable/c/b399ffafffba39f47b731b26a5da1dc0ffc4b3ad
CVE: CVE-2022-49590
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

igmp: Fix data-races around sysctl_igmp_llm_reports.

While reading sysctl_igmp_llm_reports, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.

This test can be packed into a helper, so such changes will be in the
follow-up series after net is merged into net-next.

  if (ipv4_is_local_multicast(pmc->multiaddr) &&
      !READ_ONCE(net->ipv4.sysctl_igmp_llm_reports))
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/1656ecaddf90e2a070ec2d2404cdae3edf80faca; https://git.kernel.org/stable/c/260446eb8e5541402b271343a4516f2b33dec1e4; https://git.kernel.org/stable/c/46307adceb67bdf2ec38408dd9cebc378a6b5c46
CVE: CVE-2022-49591
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

net: dsa: microchip: ksz_common: Fix refcount leak bug

In ksz_switch_register(), we should call of_node_put() for the
reference returned by of_get_child_by_name() which has increased
the refcount.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/4165e02716518bbbe9c9104b39530d40928bc7ce; https://git.kernel.org/stable/c/88ec2ff42da3ac93b2437dc52fe25cd4372148e6; https://git.kernel.org/stable/c/a14bd7475452c51835dd5a0cee4c8fa48dd0b539
CVE: CVE-2022-49592
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

net: stmmac: fix dma queue left shift overflow issue

When queue number is > 4, left shift overflows due to 32 bits
integer variable. Mask calculation is wrong for MTL_RXQ_DMA_MAP1.

If CONFIG_UBSAN is enabled, kernel dumps below warning:
[   10.363842] ==================================================================
[   10.363882] UBSAN: shift-out-of-bounds in /build/linux-intel-iotg-5.15-8e6Tf4/
linux-intel-iotg-5.15-5.15.0/drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c:224:12
[   10.363929] shift exponent 40 is too large for 32-bit type 'unsigned int'
[   10.363953] CPU: 1 PID: 599 Comm: NetworkManager Not tainted 5.15.0-1003-intel-iotg
[   10.363956] Hardware name: ADLINK Technology Inc. LEC-EL/LEC-EL, BIOS 0.15.11 12/22/2021
[   10.363958] Call Trace:
[   10.363960]  <TASK>
[   10.363963]  dump_stack_lvl+0x4a/0x5f
[   10.363971]  dump_stack+0x10/0x12
[   10.363974]  ubsan_epilogue+0x9/0x45
[   10.363976]  __ubsan_handle_shift_out_of_bounds.cold+0x61/0x10e
[   10.363979]  ? wake_up_klogd+0x4a/0x50
[   10.363983]  ? vprintk_emit+0x8f/0x240
[   10.363986]  dwmac4_map_mtl_dma.cold+0x42/0x91 [stmmac]
[   10.364001]  stmmac_mtl_configuration+0x1ce/0x7a0 [stmmac]
[   10.364009]  ? dwmac410_dma_init_channel+0x70/0x70 [stmmac]
[   10.364020]  stmmac_hw_setup.cold+0xf/0xb14 [stmmac]
[   10.364030]  ? page_pool_alloc_pages+0x4d/0x70
[   10.364034]  ? stmmac_clear_tx_descriptors+0x6e/0xe0 [stmmac]
[   10.364042]  stmmac_open+0x39e/0x920 [stmmac]
[   10.364050]  __dev_open+0xf0/0x1a0
[   10.364054]  __dev_change_flags+0x188/0x1f0
[   10.364057]  dev_change_flags+0x26/0x60
[   10.364059]  do_setlink+0x908/0xc40
[   10.364062]  ? do_setlink+0xb10/0xc40
[   10.364064]  ? __nla_validate_parse+0x4c/0x1a0
[   10.364068]  __rtnl_newlink+0x597/0xa10
[   10.364072]  ? __nla_reserve+0x41/0x50
[   10.364074]  ? __kmalloc_node_track_caller+0x1d0/0x4d0
[   10.364079]  ? pskb_expand_head+0x75/0x310
[   10.364082]  ? nla_reserve_64bit+0x21/0x40
[   10.364086]  ? skb_free_head+0x65/0x80
[   10.364089]  ? security_sock_rcv_skb+0x2c/0x50
[   10.364094]  ? __cond_resched+0x19/0x30
[   10.364097]  ? kmem_cache_alloc_trace+0x15a/0x420
[   10.364100]  rtnl_newlink+0x49/0x70

This change fixes MTL_RXQ_DMA_MAP1 mask issue and channel/queue
mapping warning.

BugLink: https://bugzilla.kernel.org/show_bug.cgi?id=216195
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://git.kernel.org/stable/c/508d86ead36cbd8dfb60773a33276790d668c473; https://git.kernel.org/stable/c/573768dede0e2b7de38ecbc11cb3ee47643902dc; https://git.kernel.org/stable/c/613b065ca32e90209024ec4a6bb5ca887ee70980
CVE: CVE-2022-49593
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_probe_interval.

While reading sysctl_tcp_probe_interval, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/2a85388f1d94a9f8b5a529118a2c5eaa0520d85c; https://git.kernel.org/stable/c/73a11588751a2c13f25d9da8117efc9a79b1843f; https://git.kernel.org/stable/c/80dabd089086e6553b7acfcff2ec223bdada87a1
CVE: CVE-2022-49594
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.

While reading sysctl_tcp_mtu_probe_floor, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/033963b220633ed1602d458e7e4ac06afa9fefb2; https://git.kernel.org/stable/c/8e92d4423615a5257d0d871fc067aa561f597deb; https://git.kernel.org/stable/c/cc36c37f5fe066c4708e623ead96dc8f57224bf5
CVE: CVE-2022-49595
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_probe_threshold.

While reading sysctl_tcp_probe_threshold, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/[PII_REDACTED]0d53bc01980d9c060f736808d11af0; https://git.kernel.org/stable/c/92c0aa[PII_REDACTED]d6cf373314343d4e624e882a; https://git.kernel.org/stable/c/96900fa61777402eb5056269d8000aace33a8b6c
CVE: CVE-2022-49596
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_min_snd_mss.

While reading sysctl_tcp_min_snd_mss, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/0d8a39feb58910a7f7746b1770ee5578cc551fe6; https://git.kernel.org/stable/c/0fc9357282df055e30990b29f4b7afa53ab42cdb; https://git.kernel.org/stable/c/78eb166cdefcc3221c8c7c1e2d514e91a2eb5014
CVE: CVE-2022-49597
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_base_mss.

While reading sysctl_tcp_base_mss, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/30b73edc1d2459ba2c71cb58fbf84a1a6e640fbf; https://git.kernel.org/stable/c/4d7dea651b7fe0322be95054f64e3711afccc543; https://git.kernel.org/stable/c/514d2254c7b8aa2d257f5ffc79f0d96be2d6bfda
CVE: CVE-2022-49598
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_mtu_probing.

While reading sysctl_tcp_mtu_probing, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/77a04845f0d28a3561494a5f[PII_REDACTED]a968a4; https://git.kernel.org/stable/c/7e8fc428a7f680f1c4994a40e52d7f95a9a93038; https://git.kernel.org/stable/c/aabe9438fdfe004e021d5a206227ec105dbe2416
CVE: CVE-2022-49599
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_l3mdev_accept.

While reading sysctl_tcp_l3mdev_accept, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its readers.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/08a75f[PII_REDACTED]a3a443f9aefd1399604d31d; https://git.kernel.org/stable/c/1d9c81833dec46ccb52a1d0db970fefb7c4fa071; https://git.kernel.org/stable/c/7d38d86b818104cf88961f3aebea34da89364a8e
CVE: CVE-2022-49600
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

ip: Fix a data-race around sysctl_ip_autobind_reuse.

While reading sysctl_ip_autobind_reuse, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/0db232765887d9807df8bcb7b6f29b2871539eab; https://git.kernel.org/stable/c/611ba70e5aca252ef43374dda97ed4cf1c47a07c; https://git.kernel.org/stable/c/87ceaa199a72c5856d49a030941fabcd5c3928d4
CVE: CVE-2022-49601
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.

While reading sysctl_tcp_fwmark_accept, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/13207f9485b5de68decf296ceb0046f5eabb2485; https://git.kernel.org/stable/c/1a0008f9df59451d0a17806c1ee1a19857032fa8; https://git.kernel.org/stable/c/45fc82706a97242539d6b841ddd7a077ec20757b
CVE: CVE-2022-49602
Published: 2025-02-26
Description: In the Linux kernel, the following vulnerability has been resolved:

ip: Fix a data-race around sysctl_fwmark_reflect.

While reading sysctl_fwmark_reflect, it can be changed concurrently.
Thus, we need to add READ_ONCE() to its reader.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://git.kernel.org/stable/c/0ee76fe01ff3c0b4efaa500aecc90d7c8d3a8860; https://git.kernel.org/stable/c/25a635a67c[PII_REDACTED]10fea88ec4e6ee29684b; https://git.kernel.org/stable/c/5e7a1be3e68deef250ad43cc91f7bb8d7d758b48