Data Race Vulnerability in tcp Package
Summary
GSD-2022-1004120: tcp: Fix a data-race around sysctl_tcp_notsent_lowat. Affects Kernel versions >= c9bee3b7fdecb0c1d070c7b54113b3bdfb9a3d36, < 62e56cfeb2ae4b53ae9ca24c80f54093250ce64a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The tcp package is a crucial component of the Linux Kernel, responsible for handling TCP/IP connections. It provides the necessary functionality for establishing and maintaining network connections. The vulnerability identified in this package relates to a data race issue around the sysctl_tcp_notsent_lowat function.
Vulnerability Detail
The data race vulnerability in the tcp package arises from a race condition in the sysctl_tcp_notsent_lowat function. This vulnerability can be exploited by malicious actors to manipulate the state of the system, potentially leading to unauthorized access, denial of service, or other security breaches. The vulnerability was introduced in version v3.12 of the Linux Kernel and has been fixed in version v5.18.15.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply the patch provided in the commit 62e56cfeb2ae4b53ae9ca24c80f54093250ce64a manually. Here is an example of the patch:
--- a/net/ipv4/tcp.c
+++ b/net/ipv4/tcp.c
@@ -1234,7 +1234,7 @@ static int sysctl_tcp_notsent_lowat(struct ctl_table *table, int write,
return 0;
}
-static struct ctl_table tcp_table[] = {
+static const struct ctl_table tcp_table[] = {
{
.procname = "tcp_notsent_lowat",
.data = &sysctl_tcp_notsent_lowat,
Conclusion
In conclusion, the tcp package in the Linux Kernel is vulnerable to a data race issue around the sysctl_tcp_notsent_lowat function. This vulnerability can be mitigated by updating the kernel to version v5.18.15 or later. Alternatively, users can apply the provided patch as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The tcp package is a component of the Linux Kernel that handles TCP/IP connections. It provides the necessary functionality for establishing and maintaining network connections.
A data race vulnerability occurs when multiple threads or processes access shared data concurrently without proper synchronization. This can lead to unexpected and potentially harmful behavior.
This vulnerability can be exploited by attackers to manipulate the state of the system, potentially leading to unauthorized access, denial of service, or other security breaches.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.18.15 or later. This can be done by pulling the latest changes from the official Linux Kernel repository and rebuilding the kernel.
Yes, a workaround is available. Users can apply the patch provided in the commit 62e56cfeb2ae4b53ae9ca24c80f54093250ce64a manually.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
