CVE-2022-49637

Katalog CVE

CVSS 4.7 · Medium EPSS 0,18%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_sync_mem. While reading sysctl_fib_sync_mem, it can be changed concurrently. So, we need to add READ_ONCE() to avoid a data-race.

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/190cd4ff128373271e065afb20f1d2247b3f10c3 patch
• https://git.kernel.org/stable/c/418b191d5f223a8cb6cab09eae1f72c04ba6adf2 patch
• https://git.kernel.org/stable/c/73318c4b7dbd0e781aaababff17376b2894745c0 patch
• https://git.kernel.org/stable/c/7c1acd98fb221dc0d847451b9ab86319f8b9916c patch
• https://git.kernel.org/stable/c/9be8aac91960ea32fd0e874758c9afee665c57d2 patch