CVE-2022-49420

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: annotate races around sk->sk_bound_dev_if

UDP sendmsg() is lockless, and reads sk->sk_bound_dev_if while

this field can be changed by another thread.

Adds minimal annotations to avoid KCSAN splats for UDP.

Following patches will add more annotations to potential lockless readers.

BUG: KCSAN: data-race in __ip6_datagram_connect / udpv6_sendmsg

write to 0xffff888136d47a94 of 4 bytes by task 7681 on cpu 0:

__ip6_datagram_connect+0x6e2/0x930 net/ipv6/datagram.c:221

ip6_datagram_connect+0x2a/0x40 net/ipv6/datagram.c:272

inet_dgram_connect+0x107/0x190 net/ipv4/af_inet.c:576

__sys_connect_file net/socket.c:1900 [inline]

__sys_connect+0x197/0x1b0 net/socket.c:1917

__do_sys_connect net/socket.c:1927 [inline]

__se_sys_connect net/socket.c:1924 [inline]

__x64_sys_connect+0x3d/0x50 net/socket.c:1924

do_syscall_x64 arch/x86/entry/common.c:50 [inline]

do_syscall_64+0x2b/0x50 arch/x86/entry/common.c:80

entry_SYSC

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References