CVE-2022-48786
Published: Jul 16, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsock_connect() expects that the socket could already be in the TCP_ESTABLISHED state when the connecting task wakes up with a signal pending. If this happens the socket will be in the connected table, and it is not removed when the socket state is reset. In this situation it's common for the process to retry connect(), and if the connection is successful the socket will be added to the connected table a second time, corrupting the list. Prevent this by calling vsock_remove_connected() if a signal is received while waiting for a connection. This is harmless if the socket is not in the connected table, and if it is in the table then removing it will prevent list corruption from a double add. Note for backporting: this patch requires d5afa82c977e ("vsock: correct removal of socket from the list"), which is in all current stable trees except 4.9.y.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected d021c344051af91f42c5ba9fdedc176740cbd238 - < 0bb88f3f7e8d506f3efe46d694964117e20efbfcaffected d021c344051af91f42c5ba9fdedc176740cbd238 - < e3b3939fd137aab6d00d54bee0ee9244b286a608affected d021c344051af91f42c5ba9fdedc176740cbd238 - < 2910bcb9f67551a45397735e47b6d456eb8cd549affected d021c344051af91f42c5ba9fdedc176740cbd238 - < 5f326fe2aef411a6575628f92bd861463ea91df7affected d021c344051af91f42c5ba9fdedc176740cbd238 - < 87cd1bbd6677411e17369cd4b7389ab1e1fdba44+3 more versions |
Linux | Linux | affected 3.9unaffected 0 - < 3.9unaffected 4.9.303 - <= 4.9.*unaffected 4.14.268 - <= 4.14.*unaffected 4.19.231 - <= 4.19.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now