CVE-2022-49634
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
CWE ID 362
Summary
CVE-2022-49634 is a recently identified vulnerability in the Linux kernel that affects the sysctl subsystem. The issue stems from concurrent access to a sysctl variable, which can result in data races. To mitigate this risk, the patch introduced in this vulnerability resolution modifies proc_dou8vec_minmax() to employ READ_ONCE() and WRITE_ONCE() internally. Although proc_dou8vec_minmax() is currently resilient to data races, additional annotations are required on other subsystems to fully address the vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX