CVE-2022-49344

The CVE-2022-49344 issue is a Linux kernel data race in af_unix between unix_dgram_poll() and unix_dgram_peer_wake_me(): the receive-queue fullness check was done without holding the peer’s lock. The fix uses unix_recvq_full_lockless() instead of unix_recvq_full(), addressing a KCSAN-reported rac...

kernel: af_unix: Fix a data-race in unix_dgram_peer_wake_me().

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix a data-race in unixdgrampeerwakeme. unixdgrampoll calls unixdgrampeerwakeme without other's lock held and check if its receive queue is full. Here we need to use unixrecvqfulllockless instead of unixrecvqfull, otherwi...