CVE-2022-49732

The CVE-2022-49732 issue in the Linux kernel concerns psock handling and ULP protection. A change moved the inet_csk_has_ulp(sk) check from sk_psock_init() to tcp_bpf_update_proto(), enabling psocks for non-inet sockets. The destruction path of psock includes the ULP unwind, so sk_psock_init() mu...

CVE-2022-49732

In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 "sock: Introduce sk-skprot-psockupdateskprot" has moved the inetcskhasulpsk check from skpsockinit to the new tcpbpfupdateproto function. I'm guessing that this was...