CVE-2022-49325

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49325
In the Linux kernel, the following vulnerability has been resolved: tcp: add accessors to read/set tp->snd_cwnd We had various bugs over the years with code breaking the assumption that tp->snd_cwnd is greater than zero. Lately, syzbot reported the WARN_ON_ONCE(!tp->prior_cwnd) added in commit 8b8a321ff72c ("tcp: fix zero cwnd in tcp_cwnd_reduction") can trigger, and without a repro we would have to spend considerable time finding the bug. Instead of complaining too late, we want to catch where and when tp->snd_cwnd is set to an illegal value.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3308676ec525901bf1656014003c443a60730a04 Patch
https://git.kernel.org/stable/c/40570375356c874b1578e05c1dcc3ff7c1322dbe Patch
https://git.kernel.org/stable/c/41e191fe72282e193a7744e2fc1786b23156c9e4 Patch
https://git.kernel.org/stable/c/5aba0ad44fb4a7fb78c5076c313456de199a3c29 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

22 Sep 2025, 20:51

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-617
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/3308676ec525901bf1656014003c443a60730a04 - () https://git.kernel.org/stable/c/3308676ec525901bf1656014003c443a60730a04 - Patch
References () https://git.kernel.org/stable/c/40570375356c874b1578e05c1dcc3ff7c1322dbe - () https://git.kernel.org/stable/c/40570375356c874b1578e05c1dcc3ff7c1322dbe - Patch
References () https://git.kernel.org/stable/c/41e191fe72282e193a7744e2fc1786b23156c9e4 - () https://git.kernel.org/stable/c/41e191fe72282e193a7744e2fc1786b23156c9e4 - Patch
References () https://git.kernel.org/stable/c/5aba0ad44fb4a7fb78c5076c313456de199a3c29 - () https://git.kernel.org/stable/c/5aba0ad44fb4a7fb78c5076c313456de199a3c29 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tcp: agregar descriptores de acceso para leer/establecer tp->snd_cwnd Tuvimos varios errores a lo largo de los años con código que rompía la suposición de que tp->snd_cwnd es mayor que cero. Últimamente, syzbot informó que se puede activar WARN_ON_ONCE(!tp->prior_cwnd) agregado en el commit 8b8a321ff72c ("tcp: corregir cwnd cero en tcp_cwnd_reduction"), y sin una reproducción tendríamos que dedicar un tiempo considerable a encontrar el error. En lugar de quejarnos demasiado tarde, queremos detectar dónde y cuándo tp->snd_cwnd se establece en un valor ilegal.

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-09-22 20:51

NVD link : CVE-2022-49325

Mitre link : CVE-2022-49325

CVE.ORG link : CVE-2022-49325

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-617

Reachable Assertion