CVE-2022-49603

MEDIUM

Linux Kernel 4.19-5.10.134, 5.11-5.15.58, 5.16-5.18.15 - Data Race in sysctl_ip_fwd_update_priority

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_update_priority. While reading sysctl_ip_fwd_update_priority, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

References (4)

Core 4

Core References

Patch

https://git.kernel.org/stable/c/11038fa781ab916535c53351537b22d6d405667d

Patch

https://git.kernel.org/stable/c/351f81f7d7185d18a9ff76f8f8c2fa8c4eea563b

Patch

https://git.kernel.org/stable/c/bcc03369d3277ae075ed421f0c8bf4adb5e65b74

Patch

https://git.kernel.org/stable/c/7bf9e18d9a5e99e3c83482973557e9f047b051e7

Scores

CVSS v3 4.7

EPSS 0.0018

EPSS Percentile 7.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-362

Status published

Products (15)

linux/Kernel 4.19.0 - 5.10.134linux

linux/Kernel 5.11.0 - 5.15.58linux

linux/Kernel 5.16.0 - 5.18.15linux

Linux/Linux < 4.19

Linux/Linux 4.19

Linux/Linux 432e05d328921c68c35bfdeff7d7b7400b8e3d1a - 11038fa781ab916535c53351537b22d6d405667d

Linux/Linux 432e05d328921c68c35bfdeff7d7b7400b8e3d1a - 351f81f7d7185d18a9ff76f8f8c2fa8c4eea563b

Linux/Linux 432e05d328921c68c35bfdeff7d7b7400b8e3d1a - 7bf9e18d9a5e99e3c83482973557e9f047b051e7

Linux/Linux 432e05d328921c68c35bfdeff7d7b7400b8e3d1a - bcc03369d3277ae075ed421f0c8bf4adb5e65b74

Linux/Linux 5.10.134 - 5.10.*

... and 5 more

Published Feb 26, 2025

Tracked Since Feb 18, 2026