CVE-2022-49575

MEDIUM

Linux Kernel Data Race in sysctl_tcp_thin_linear_timeouts

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. While reading sysctl_tcp_thin_linear_timeouts, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

References (6)

Core 6

Core References

Patch

https://git.kernel.org/stable/c/f4b0295be9a3c4260de4585fac4062e602a88ac7

Patch

https://git.kernel.org/stable/c/492f3713b282c0e67e951cd804edd22eccc25412

Patch

https://git.kernel.org/stable/c/cc133e4f4bc225079198192623945bb872c08143

Patch

https://git.kernel.org/stable/c/404c53ccdebd11f96954f4070cffac8e0b4d5cb6

Patch

https://git.kernel.org/stable/c/a0f96c4f179cb3560078cefccef105e8f1701210

Patch

https://git.kernel.org/stable/c/7c6f2a86ca590d5187a073d987e9599985fb1c7c

Scores

CVSS v3 4.7

EPSS 0.0018

EPSS Percentile 7.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-362

Status published

Products (21)

linux/Kernel 2.6.34 - 4.19.254linux

linux/Kernel 4.20.0 - 5.4.208linux

linux/Kernel 5.11.0 - 5.15.58linux

linux/Kernel 5.16.0 - 5.18.15linux

linux/Kernel 5.5.0 - 5.10.134linux

Linux/Linux < 2.6.34

Linux/Linux 2.6.34

Linux/Linux 36e31b0af58728071e8023cf8e20c5166b700717 - 404c53ccdebd11f96954f4070cffac8e0b4d5cb6

Linux/Linux 36e31b0af58728071e8023cf8e20c5166b700717 - 492f3713b282c0e67e951cd804edd22eccc25412

Linux/Linux 36e31b0af58728071e8023cf8e20c5166b700717 - 7c6f2a86ca590d5187a073d987e9599985fb1c7c

... and 11 more

Published Feb 26, 2025

Tracked Since Feb 18, 2026