Vulnerability in Linux Kernel Socket Implementation

CVE-2022-49732

Summary

A vulnerability in the Linux kernel's socket implementation affects the creation and handling of prototypical sockets (psocks). The issue arises from a change that altered the protection check between psocks and upper layer protocols (ULPs). This flaw can lead to improper initialization under certain conditions, causing ULPs to enter an unintended looping state. The problem highlights the critical need for thorough validation during socket management to ensure stability and security within the kernel's networking stack.

References