CVE-2022-49637
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
CWE ID 362
Summary
CVE-2022-49637 is a data-race vulnerability affecting the Linux kernel. Specifically, it involves the sysctl_fib_sync_mem function, where concurrent reads and writes can lead to inconsistent data. This issue puts the system at risk of potential crashes or unintended behavior. To mitigate the risk, the Linux development team has added the READ_ONCE() macro to prevent data-race conditions when accessing this memory location.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.