CVE-2022-49572
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362
Summary
CVE-2022-49572 is a vulnerability affecting the Linux kernel. It involves a data race in the tcp subsystem, specifically in the sysctl_tcp_slow_start_after_idle variable. This issue allows a thread to change the value of the variable while another thread is reading it, leading to potential inconsistencies and unintended behavior. To mitigate this risk, the Linux kernel team added the READ_ONCE() macro to ensure thread-safe access to this variable.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX