CVE-2022-49590

Katalog CVE

CVSS 4.7 · Medium EPSS 0,19%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_llm_reports. While reading sysctl_igmp_llm_reports, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. This test can be packed into a helper, so such changes will be in the follow-up series after net is merged into net-next. if (ipv4_is_local_multicast(pmc->multiaddr) && !READ_ONCE(net->ipv4.sysctl_igmp_llm_reports))

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1656ecaddf90e2a070ec2d2404cdae3edf80faca mailing list · patch
• https://git.kernel.org/stable/c/260446eb8e5541402b271343a4516f2b33dec1e4 mailing list · patch
• https://git.kernel.org/stable/c/46307adceb67bdf2ec38408dd9cebc378a6b5c46 mailing list · patch
• https://git.kernel.org/stable/c/473aad9ad57ff760005377e6f45a2ad4210e08ce mailing list · patch
• https://git.kernel.org/stable/c/a84b4afaca2573ed3aed1f8854aefe3ca5a82e72 mailing list · patch
• https://git.kernel.org/stable/c/d77969e7d4ccc26bf1f414a39ef35050a83ba6d5 mailing list · patch
• https://git.kernel.org/stable/c/ed876e99ccf417b8bd7fd8408ba5e8b008e46cc8 mailing list · patch
• https://git.kernel.org/stable/c/f6da2267e71106474fbc0943dc24928b9cb79119 mailing list · patch