CVE-2022-49639

Katalog CVE

CVSS 4.7 · Medium EPSS 0,18%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: cipso: Fix data-races around sysctl. While reading cipso sysctl variables, they can be changed concurrently. So, we need to add READ_ONCE() to avoid data-races.

Rincian

Terbit di NVD

26 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/07b0caf8aeb9b82e6ecc6c292a3e47c7fcdb1148 patch
• https://git.kernel.org/stable/c/0e41a0f73ccb9be112a80bde3804a771633caaef patch
• https://git.kernel.org/stable/c/2764f82bbc158d106693ae3ced3675cf4b963b35 patch
• https://git.kernel.org/stable/c/59e26906b89cc35bb54476498772b45cbc32323f patch
• https://git.kernel.org/stable/c/c321e99d2725d11f7e6a4ebd9ce752259f0bae81 patch
• https://git.kernel.org/stable/c/ca26ca5e2f3eeb3e6fe699cd6effa3b4b2aa8698 patch
• https://git.kernel.org/stable/c/dd44f04b9214adb68ef5684ae87a81ba03632250 patch
• https://git.kernel.org/stable/c/fe2a35fa2c4f9c8ce5ef970eb927031387f9446a patch