CVE & CISA-KEV Catalog

CVE-2022-49732

MEDIUM
5.5
CVSS v3
NVD

Description

In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 ("sock: Introduce sk->sk_prot->psock_update_sk_prot()") has moved the inet_csk_has_ulp(sk) check from sk_psock_init() to the new tcp_bpf_update_proto() function. I'm guessing that this was done to allow creating psocks for non-inet sockets. Unfortunately the destruction path for psock includes the ULP unwind, so we need to fail the sk_psock_init() itself. Otherwise if ULP is already present we'll notice that later, and call tcp_update_ulp() with the sk_proto of the ULP itself, which will most likely result in the ULP looping its callbacks.

How to fix

Remediation Available
linuxDebian
Fixed in:5.18.14-1CVE-2022-49732
Fixed in:5.18.14-1CVE-2022-49732
Fixed in:5.18.14-1CVE-2022-49732
bpftoolRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
bpftoolRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
bpftool-debuginfoRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
bpftool-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernelRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernelRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-abi-stablelistsRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-abi-stablelistsRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-coreRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-coreRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debugRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debugRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-coreRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-coreRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-debuginfoRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-develRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-develRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-modulesRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-modulesRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debug-modules-extraRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfoRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfo-common-aarch64Rocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfo-common-aarch64Red Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfo-common-ppc64leRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfo-common-ppc64leRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfo-common-s390xRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfo-common-s390xRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfo-common-x86_64Red Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-debuginfo-common-x86_64Rocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-develRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-develRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-docRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-docRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-modulesRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-modulesRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-modules-extraRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-toolsRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-toolsRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-tools-debuginfoRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-tools-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-tools-libsRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-tools-libsRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-tools-libs-develRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-tools-libs-develRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdumpRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdumpRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-coreRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-coreRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-debuginfoRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-develRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-develRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-modulesRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-modulesRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
kernel-zfcpdump-modules-extraRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
perfRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
perfRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
perf-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
perf-debuginfoRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
python3-perfRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
python3-perfRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
python3-perf-debuginfoRocky
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
python3-perf-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951
Fixed in:0:4.18.0-477.10.1.el8_8RHSA-2023:2951

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

0.19%probability of exploitation in 30 days
9thpercentile

Low risk: more likely to be exploited than 9% of all known CVEs.

References

Embed a live status badge for CVE-2022-49732
CVE-2022-49732 severity badge

Markdown

[![CVE-2022-49732](https://tridentstack.com/cve/badge/CVE-2022-49732.svg)](https://tridentstack.com/cve/CVE-2022-49732)

HTML

<a href="https://tridentstack.com/cve/CVE-2022-49732"><img src="https://tridentstack.com/cve/badge/CVE-2022-49732.svg" alt="CVE-2022-49732"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-10-24.