CVE-2022-49593
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362
Summary
CVE-2022-49593 is a data-race vulnerability affecting the Linux kernel's tcp subsystem. The issue lies in the concurrent modification of sysctl_tcp_probe_interval, which can cause inconsistencies during its reading. This vulnerability could potentially lead to unintended system behavior or denial of service attacks. To mitigate the risk, the update adds the READ_ONCE() function to ensure proper synchronization when accessing this variable.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX