CVE-2022-49595
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362
Summary
CVE-2022-49595 is a data-race vulnerability identified in the Linux kernel's tcp module. The issue arises from the concurrent modification of sysctl_tcp_probe_threshold while it is being read. This could potentially lead to incorrect or inconsistent data being processed, posing a security risk. To mitigate this vulnerability, the Linux kernel team has implemented the READ_ONCE() function to ensure that the value of sysctl_tcp_probe_threshold is properly synchronized during read operations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX