CVE-2022-49639
CVSS 3.1 Score 4.7 of 10 (medium)
Details
Published Feb 26, 2025
Updated: Mar 11, 2025
CWE ID 362
Summary
CVE-2022-49639 is a vulnerability affecting the Linux kernel. It involves data races in the handling of cipso sysctl variables. Specifically, while a sysctl variable is being read, it can be concurrently changed, leading to unpredictable behavior. To mitigate this issue, the Linux kernel has been updated to use the READ_ONCE() function, ensuring that the variable is read once and only once, preventing data races.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.