VDB

CISA-2022-49578

CISA-2022-49578 PUBLISHED CVSS 4.7 MEDIUM

Reported by Linux · Published February 26, 2025

In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_prot_sock. sysctl_ip_prot_sock is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing.

Risk Scores

CVSS 3.1
4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
LinuxLinux4548b683b78137f8eadeb312b94e20bb0d4a7141, 4548b683b78137f8eadeb312b94e20bb0d4a7141, 4548b683b78137f8eadeb312b94e20bb0d4a7141
LinuxLinux4.11, 0, 5.10.134
LinuxLinux*, 5.10.134, 5.15.58
linuxlinux_kernel4.11, 4.11, 4.11

Timeline

  • Feb 26, 2025 CVE Published
  • Oct 1, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›