CVE-2022-49586
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362
Summary
CVE-2022-49586 is a vulnerability affecting the Linux kernel. This issue is related to the TCP implementation where data races were identified around sysctl_tcp_fastopen. Reading this variable can occur concurrently with its change, leading to potential security risks. To mitigate this, it is necessary to add the READ_ONCE() macro to the readers, ensuring consistent and secure access to the sysctl_tcp_fastopen variable.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX