A vulnerability, which was classified as problematic, was found in Linux Kernel (Operating System) (the affected version is unknown). This affects the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. The manipulation with an unknown input leads to a race condition vulnerability. CWE is classifying the issue as CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was shared 10/17/2022. The advisory is shared at git.kernel.org. This vulnerability is uniquely identified as CVE-2022-3566. Technical details are known, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 208951 (Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2024-12779)), which helps to determine the existence of the flaw in a target environment.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.kernel.org.

The vulnerability is also documented in the vulnerability database at Tenable (208951). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion