CVE-2022-49638
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
CWE ID 362
Summary
CVE-2022-49638 is a vulnerability affecting the Linux kernel. It involves data-races in the icmp (Internet Control Message Protocol) subsystem while reading icmp sysctl variables. This issue arises due to the fact that these variables can be changed concurrently during reading, leading to potential inconsistencies. To mitigate this issue, the Linux kernel team has implemented the use of the READ_ONCE() macro, preventing data-races and ensuring the integrity of icmp sysctl variables.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.