CVE-2022-49814: Concurrent Execution using Shared Resource with Improper Synchronization

In the Linux kernel, the following vulnerability has been resolved: kcm: close race conditions on skreceivequeue sk-skreceivequeue is protected by skb queue lock, but for KCM sockets its RX path takes mux-rxlock to protect more than just skb queue. However, kcmrecvmsg still only grabs the skb que...

Vulnerability of the connect() and close() functions in Linux kernel, allowing attackers to gain unauthorized access to protected information

The vulnerability of the connect and close functions in the Linux operating system’s kernel is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using the AFVSOC...