CVE-2022-49344
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 13, 2025
CWE ID 362
Summary
CVE-2022-44934: A data-race vulnerability has been identified and addressed in the Linux kernel's af_unix subsystem. Specifically, in the function unix_dgram_peer_wake_me(), the kernel failed to hold the lock of the other party's receive queue before checking its fullness. This oversight could result in a data-race condition and potential kernel crashes or other unintended behavior. To mitigate this issue, unix_recvq_full_lockless() should be used instead of unix_recvq_full() in the unix_dgram_poll() function.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.