[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-50265":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":22,"technologies":26,"references":28,"score":37,"epss_score":38,"epss_percentile":39,"is_kev":20,"cisa_kev_date_added":40,"cisa_kev_due_date":40,"cisa_ssvc":41,"attack_mappings":47,"exploits":54},298445,"CVE-2022-50265","EUVD-2022-55590","In the Linux kernel, the following vulnerability has been resolved:\n\nkcm: annotate data-races around kcm->rx_wait\n\nkcm->rx_psock can be read locklessly in kcm_rfree().\nAnnotate the read and writes accordingly.\n\nsyzbot reported:\n\nBUG: KCSAN: data-race in kcm_rcv_strparser \u002F kcm_rfree\n\nwrite to 0xffff88810784e3d0 of 1 bytes by task 1823 on cpu 1:\nreserve_rx_kcm net\u002Fkcm\u002Fkcmsock.c:283 [inline]\nkcm_rcv_strparser+0x250\u002F0x3a0 net\u002Fkcm\u002Fkcmsock.c:363\n__strp_recv+0x64c\u002F0xd20 net\u002Fstrparser\u002Fstrparser.c:301\nstrp_recv+0x6d\u002F0x80 net\u002Fstrparser\u002Fstrparser.c:335\ntcp_read_sock+0x13e\u002F0x5a0 net\u002Fipv4\u002Ftcp.c:1703\nstrp_read_sock net\u002Fstrparser\u002Fstrparser.c:358 [inline]\ndo_strp_work net\u002Fstrparser\u002Fstrparser.c:406 [inline]\nstrp_work+0xe8\u002F0x180 net\u002Fstrparser\u002Fstrparser.c:415\nprocess_one_work+0x3d3\u002F0x720 kernel\u002Fworkqueue.c:2289\nworker_thread+0x618\u002F0xa70 kernel\u002Fworkqueue.c:2436\nkthread+0x1a9\u002F0x1e0 kernel\u002Fkthread.c:376\nret_from_fork+0x1f\u002F0x30 arch\u002Fx86\u002Fentry\u002Fentry_64.S:306\n\nread to 0xffff88810784e3d0 of 1 bytes by task 17869 on cpu 0:\nkcm_rfree+0x121\u002F0x220 net\u002Fkcm\u002Fkcmsock.c:181\nskb_release_head_state+0x8e\u002F0x160 net\u002Fcore\u002Fskbuff.c:841\nskb_release_all net\u002Fcore\u002Fskbuff.c:852 [inline]\n__kfree_skb net\u002Fcore\u002Fskbuff.c:868 [inline]\nkfree_skb_reason+0x5c\u002F0x260 net\u002Fcore\u002Fskbuff.c:891\nkfree_skb include\u002Flinux\u002Fskbuff.h:1216 [inline]\nkcm_recvmsg+0x226\u002F0x2b0 net\u002Fkcm\u002Fkcmsock.c:1161\n____sys_recvmsg+0x16c\u002F0x2e0\n___sys_recvmsg net\u002Fsocket.c:2743 [inline]\ndo_recvmmsg+0x2f1\u002F0x710 net\u002Fsocket.c:2837\n__sys_recvmmsg net\u002Fsocket.c:2916 [inline]\n__do_sys_recvmmsg net\u002Fsocket.c:2939 [inline]\n__se_sys_recvmmsg net\u002Fsocket.c:2932 [inline]\n__x64_sys_recvmmsg+0xde\u002F0x160 net\u002Fsocket.c:2932\ndo_syscall_x64 arch\u002Fx86\u002Fentry\u002Fcommon.c:50 [inline]\ndo_syscall_64+0x2b\u002F0x70 arch\u002Fx86\u002Fentry\u002Fcommon.c:80\nentry_SYSCALL_64_after_hwframe+0x63\u002F0xcd\n\nvalue changed: 0x01 -> 0x00\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 PID: 17869 Comm: syz-executor.2 Not tainted 6.1.0-rc1-syzkaller-00010-gbb1a1146467a-dirty #0\nHardware name: Google Google Compute Engine\u002FGoogle Compute Engine, BIOS Google 09\u002F22\u002F2022","2025-09-15T15:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",5.5,"LOCAL","MEDIUM","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",false,[],[23,24,25],"cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*",[27],"Linux Linux Kernel",[29,30,31,32,33,34,35,36],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F0c745b5141a45a076f1cb9772a399f7ebcb0948a","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F2733fb2ad5bfbe6538f2f93a21f2504e3dba9d6a","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F62086d1c4602e4f2ec07b975165afc2ed0ff1be9","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F663682cd3192dd4f3547b7890a4391c72441001d","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F9ae47f11493509cde707af8ecc7eee04c8b8e635","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fdbc3a0b917c4f75292b1c0819c188e40fd3c8924","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fe2a28807b1ceaa309164b92c38d73d12feea33df","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Ff1f7122bb2ef056afc6f91ce4c35ab6df1207c8d",0.28,0.00159,0.0506,null,{"timestamp":40,"automatable":42,"tech_impact":43,"exploitation":44,"cisa_decision":45,"cisa_remediation_timeline":46},"no","partial","none",{},"FSU",[48],{"name":49,"source":50,"tactics":51,"technique_id":53},"Exploitation for Privilege Escalation","attack_vector",[52],"privilege-escalation","T1068",[]]