Acknowledged
Created: Jun 18, 2025
Updated: Sep 4, 2026
Resolved Date: Jun 19, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]kcm: fix strp_init() order and cleanup[EOL][EOL]strp_init() is called just a few lines above this csk->sk_user_data[EOL]check, it also initializes strp->work etc., therefore, it is[EOL]unnecessary to call strp_done() to cancel the freshly initialized[EOL]work.[EOL][EOL]And if sk_user_data is already used by KCM, psock->strp should not be[EOL]touched, particularly strp->work state, so we need to move strp_init()[EOL]after the csk->sk_user_data check.[EOL][EOL]This also makes a lockdep warning reported by syzbot go away.
CREATE(Triage):(User=lchen-cn) [CVE-2022-49957 (https://nvd.nist.gov/vuln/detail/CVE-2022-49957)
