CVE-2022-49732
MEDIUM EPSS 8.9%
Published Feb 26, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 ("sock: Introduce sk->sk_prot->psock_update_sk_prot()") has moved the inet_csk_has_ulp(sk) check from sk_psock_init() to the new tcp_bpf_update_proto() function. I'm guessing that this was done to allow creating psocks for non-inet sockets. Unfortunately the destruction path for psock includes the ULP unwind, so we need to fail the sk_psock_init() itself. Otherwise if ULP is already present we'll notice that later, and call tcp_update_ulp() with the sk_proto of the ULP itself, which will most likely result in the ULP looping its callbacks.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
8.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 5
References 3
- git.kernel.org https://git.kernel.org/stable/c/72fa0f65b56605b8a9ae9fba2082f2123f7fe017
- git.kernel.org https://git.kernel.org/stable/c/922309e50befb0cfa5cb65e4989b7706d6578846
- git.kernel.org https://git.kernel.org/stable/c/e34a07c0ae3906f97eb18df50902e2a01c1015b6
Remediation
- git.kernel.org https://git.kernel.org/stable/c/72fa0f65b56605b8a9ae9fba2082f2123f7fe017
- git.kernel.org https://git.kernel.org/stable/c/922309e50befb0cfa5cb65e4989b7706d6578846
- git.kernel.org https://git.kernel.org/stable/c/e34a07c0ae3906f97eb18df50902e2a01c1015b6