Data Race Vulnerability in tcp/dccp Package
Summary
GSD-2022-1004782: tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. Affects Kernel versions >= 84f39b08d7868ce10eeaf640627cb89777f0ae93, < abf70de2ec026ae8d7da4e79bec61888a880e00b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The tcp/dccp package is a component of the Linux Kernel, which is responsible for handling TCP and DCCP (Datagram Congestion Control Protocol) network protocols. It provides the necessary functionality for establishing and managing network connections. The vulnerability identified in this package relates to a data race issue around the sysctl_tcp_fwmark_accept function.
Vulnerability Detail
The data race vulnerability in the tcp/dccp package can lead to unpredictable behavior and potential security risks. A data race occurs when multiple threads or processes access shared data concurrently without proper synchronization. In this case, the sysctl_tcp_fwmark_accept function is susceptible to a data race, which can result in incorrect handling of firewall marks for TCP connections. This vulnerability could potentially be exploited by an attacker to manipulate network connections and bypass firewall rules.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can apply the patch provided in commit abf70de2ec026ae8d7da4e79bec61888a880e00b manually. Here is an example of the patch:
--- a/net/ipv4/sysctl_net_ipv4.c
+++ b/net/ipv4/sysctl_net_ipv4.c
@@ -123,7 +123,7 @@ static struct ctl_table ipv4_table[] = {
{ .procname = "fwmark_accept", .data = &sysctl_tcp_fwmark_accept,
.maxlen = sizeof(int), .mode = 0644, .proc_handler = proc_dointvec,
.extra1 = &zero, .extra2 = &one },
- { .procname = "fwmark_accept", .data = &sysctl_udp_fwmark_accept,
+ { .procname = "udp_fwmark_accept", .data = &sysctl_udp_fwmark_accept,
.maxlen = sizeof(int), .mode = 0644, .proc_handler = proc_dointvec,
.extra1 = &zero, .extra2 = &one },
{ .procname = "fwmark_reject", .data = &sysctl_tcp_fwmark_reject,
This patch modifies the sysctl_net_ipv4.c file to correctly handle the fwmark_accept function.
Conclusion
The data race vulnerability in the tcp/dccp package can have serious security implications. It is crucial to update the Linux Kernel to the latest version to mitigate this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The tcp/dccp package is a component of the Linux Kernel that handles TCP and DCCP network protocols.
A data race vulnerability occurs when multiple threads or processes access shared data concurrently without proper synchronization.
sysctl_tcp_fwmark_accept is a function in the tcp/dccp package that handles firewall marks for TCP connections.
This vulnerability can lead to unpredictable behavior and potential security risks, allowing attackers to manipulate network connections and bypass firewall rules.
To fix this vulnerability, update the Linux Kernel to version v4.19.254 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
