CVE-2022-49589

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Feb 26, 2025

Updated: Mar 10, 2025

CWE ID 362

Summary

CVE-2022-49587 is a newly identified vulnerability affecting the Linux kernel. Specifically, it impacts the TCP component, where a data race was found around the sysctl_tcp_notsent_lowat variable. This issue allows for concurrent changes to the variable while it is being read, posing a potential security risk. To mitigate this vulnerability, the kernel has been updated to include the READ_ONCE() function, ensuring proper synchronization and data consistency when accessing this variable.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Linux Kernel

Affected Vendors

LINUX

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/3uuQaa
https://www.cve.org/CVERecord?id=CVE-2022-49589
https://nvd.nist.gov/vuln/detail/CVE-2022-49589

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners