CVE-2022-49632
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
CWE ID 362
Summary
CVE-2022-49632 is a data race vulnerability affecting the Linux kernel's icmp subsystem. Specifically, in the sysctl_icmp_errors_use_inbound_ifaddr variable, there is a risk of concurrent modification and reading. This issue can lead to unintended behavior and potential security implications. To mitigate this risk, the Linux kernel team added the READ_ONCE() macro to ensure proper synchronization when accessing this variable.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.