CVE Database
/

CVE-2022-48786

Back to search

CVE-2022-48786

Published: Jul 16, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsock_connect() expects that the socket could already be in the TCP_ESTABLISHED state when the connecting task wakes up with a signal pending. If this happens the socket will be in the connected table, and it is not removed when the socket state is reset. In this situation it's common for the process to retry connect(), and if the connection is successful the socket will be added to the connected table a second time, corrupting the list. Prevent this by calling vsock_remove_connected() if a signal is received while waiting for a connection. This is harmless if the socket is not in the connected table, and if it is in the table then removing it will prevent list corruption from a double add. Note for backporting: this patch requires d5afa82c977e ("vsock: correct removal of socket from the list"), which is in all current stable trees except 4.9.y.

VendorProductVersions

Linux

Linux

affected
d021c344051af91f42c5ba9fdedc176740cbd238 - < 0bb88f3f7e8d506f3efe46d694964117e20efbfc
affected
d021c344051af91f42c5ba9fdedc176740cbd238 - < e3b3939fd137aab6d00d54bee0ee9244b286a608
affected
d021c344051af91f42c5ba9fdedc176740cbd238 - < 2910bcb9f67551a45397735e47b6d456eb8cd549
affected
d021c344051af91f42c5ba9fdedc176740cbd238 - < 5f326fe2aef411a6575628f92bd861463ea91df7
affected
d021c344051af91f42c5ba9fdedc176740cbd238 - < 87cd1bbd6677411e17369cd4b7389ab1e1fdba44

+3 more versions

Linux

Linux

affected
3.9
unaffected
0 - < 3.9
unaffected
4.9.303 - <= 4.9.*
unaffected
4.14.268 - <= 4.14.*
unaffected
4.19.231 - <= 4.19.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now