CVE-2022-49594
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362
Summary
CVE-2022-49594 is a recently identified vulnerability in the Linux kernel. This issue affects the TCP (Transmission Control Protocol) component, where a data-race condition was discovered in the sysctl_tcp_mtu_probe_floor variable. The problem occurs when this variable is being read at the same time it is being changed, leading to potential inconsistencies and unintended behavior. To address this, the Linux kernel team added the READ_ONCE() macro to ensure proper synchronization and prevent data corruption.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX