CVE-2022-49599

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 10, 2025
CWE ID 362

Summary

CVE-2022-49599: A vulnerability in the Linux kernel's tcp subsystem has been identified and addressed. The issue involved data races in the sysctl_tcp_l3mdev_accept function, where the data being read could be concurrently modified. To mitigate this risk, the function has been updated with the READ_ONCE() macro to ensure proper synchronization during read operations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share