CVE-2022-49574

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362

Summary

CVE-2022-49574 is a newly identified vulnerability in the Linux kernel that affects the TCP (Transmission Control Protocol) subsystem. The issue involves a data race during the reading of sysctl_tcp_recovery, which can be modified concurrently. To mitigate this issue, the Linux developers have added the READ_ONCE() macro to its readers to ensure proper synchronization and prevent potential data corruption or unintended behavior.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share