← CVE Intelligence

CVE-2022-49637

ipv4: Fix a data-race around sysctl_fib_sync_mem. PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctl_fib_sync_mem. While reading sysctl_fib_sync_mem, it can be changed concurrently. So, we need to add READ_ONCE() to avoid a data-race.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 9ab948a91b2c2abc8e82845c0e61f4b1683e3a4f before 7c1acd98fb221dc0d847451b9ab86319f8b9916c; affected 9ab948a91b2c2abc8e82845c0e61f4b1683e3a4f before 418b191d5f223a8cb6cab09eae1f72c04ba6adf2; affected 9ab948a91b2c2abc8e82845c0e61f4b1683e3a4f before 9be8aac91960ea32fd0e874758c9afee665c57d2; affected 9ab948a91b2c2abc8e82845c0e61f4b1683e3a4f before 190cd4ff128373271e065afb20f1d2247b3f10c3; affected 9ab948a91b2c2abc8e82845c0e61f4b1683e3a4f before 73318c4b7dbd0e781aaababff17376b2894745c0
Linux / Linuxaffected 5.2; unaffected 0 before 5.2; unaffected 5.4.207 through 5.4.*; unaffected 5.10.132 through 5.10.*; unaffected 5.15.56 through 5.15.*; unaffected 5.18.13 through 5.18.*; unaffected 5.19 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.