{
  "cveId": "CVE-2022-49814",
  "url": "https://patchblox.com/security/cve/CVE-2022-49814",
  "summary": "CVE-2022-49814 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-49814, released May 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  kcm: close race conditions on sk_receive_queue...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  kcm: close race conditions on sk_receive_queue  sk-\u003Esk_receive_queue is protected by skb queue lock, but for KCM sockets its RX path takes mux-\u003Erx_lock to protect more than just skb queue. However, kcm_recvmsg() still only grabs the skb queue lock, so race conditions still exist.  We can teach kcm_recvmsg() to grab mux-\u003Erx_lock too but this would introduce a potential performance regression as struct kcm_mux can be shared by multiple KCM sockets.  So we have to enforce skb queue lock in requeue_rx_msgs() and handle skb peek case carefully in kcm_wait_data(). Fortunately, skb_recv_datagram() already handles it nicely and is widely used by other sockets, we can just switch to skb_recv_datagram() after getting rid of the unnecessary sock lock in kcm_recvmsg() and kcm_splice_read(). Side note: SOCK_DONE is not used by KCM sockets, so it is safe to get rid of this check too.  I ran the original syzbot reproducer for 30 min without seeing any issue.",
  "published": "2025-05-01T15:16:04Z",
  "severity": "medium",
  "cvss": 4.7,
  "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00166,
  "epssPercentile": 0.05875,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49814",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49814",
      "released": "2025-05-01T15:16:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49814",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49814",
      "released": "2025-05-01T15:16:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.0.10-1",
      "fix": "DEBIAN-CVE-2022-49814",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-49814",
      "released": "2025-05-01T15:16:04Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}