CVE-2022-49732

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49732
In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 ("sock: Introduce sk->sk_prot->psock_update_sk_prot()") has moved the inet_csk_has_ulp(sk) check from sk_psock_init() to the new tcp_bpf_update_proto() function. I'm guessing that this was done to allow creating psocks for non-inet sockets. Unfortunately the destruction path for psock includes the ULP unwind, so we need to fail the sk_psock_init() itself. Otherwise if ULP is already present we'll notice that later, and call tcp_update_ulp() with the sk_proto of the ULP itself, which will most likely result in the ULP looping its callbacks.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/72fa0f65b56605b8a9ae9fba2082f2123f7fe017 Patch
https://git.kernel.org/stable/c/922309e50befb0cfa5cb65e4989b7706d6578846 Patch
https://git.kernel.org/stable/c/e34a07c0ae3906f97eb18df50902e2a01c1015b6 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
History

24 Oct 2025, 18:48

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sock: rehacer la comprobación de protección psock vs ULP el commit 8a59f9d1e3d4 ("sock: Introduce sk->sk_prot->psock_update_sk_prot()") ha movido la comprobación inet_csk_has_ulp(sk) de sk_psock_init() a la nueva función tcp_bpf_update_proto(). Supongo que esto se hizo para permitir la creación de psocks para sockets que no sean inet. Desafortunadamente, la ruta de destrucción para psock incluye el desenrollado de ULP, por lo que debemos hacer que falle el propio sk_psock_init(). De lo contrario, si ULP ya está presente, lo notaremos más tarde y llamaremos a tcp_update_ulp() con el sk_proto del propio ULP, lo que probablemente provocará que el ULP repita sus devoluciones de llamadas.
References () https://git.kernel.org/stable/c/72fa0f65b56605b8a9ae9fba2082f2123f7fe017 - () https://git.kernel.org/stable/c/72fa0f65b56605b8a9ae9fba2082f2123f7fe017 - Patch
References () https://git.kernel.org/stable/c/922309e50befb0cfa5cb65e4989b7706d6578846 - () https://git.kernel.org/stable/c/922309e50befb0cfa5cb65e4989b7706d6578846 - Patch
References () https://git.kernel.org/stable/c/e34a07c0ae3906f97eb18df50902e2a01c1015b6 - () https://git.kernel.org/stable/c/e34a07c0ae3906f97eb18df50902e2a01c1015b6 - Patch

26 Feb 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 15:15

Updated : 2025-10-24 18:48

NVD link : CVE-2022-49732

Mitre link : CVE-2022-49732

CVE.ORG link : CVE-2022-49732

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo