CVE-2022-49590

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362

Summary

CVE-2022-44959 introduces a data-race vulnerability in the Linux kernel's igmp subsystem. The issue arises when reading sysctl_igmp_llm_reports while it can be concurrently changed. To mitigate this issue, the READ_ONCE() macro has been added to its readers. This vulnerability was discovered during the resolution of a related issue and will be addressed in upcoming net-next releases.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share