CVE-2022-49580
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362
Summary
CVE-2022-49580 is a newly identified vulnerability in the Linux kernel. It affects the ipv4 component and involves a data race condition surrounding the variable sysctl_fib_multipath_use_neigh. This issue arises because the variable can be modified concurrently while being read, leading to potential inconsistencies and unexpected behavior. To address this issue, developers have added the READ_ONCE() macro to the reader, ensuring proper synchronization and mitigating the risk of exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX