Riskcovery

CVE-2022-49593

tcp: Fix a data-race around sysctl_tcp_probe_interval.

State
Published
Severity
4.7 Medium
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_probe_interval.

While reading sysctl_tcp_probe_interval, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Scores

CVSSScoreVectorSource
3.14.7 MediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • 05cbc0db03e82128f2e7e353d4194dd24a1627fe to before 80dabd089086e6553b7acfcff2ec223bdada87a1Affected
  • 05cbc0db03e82128f2e7e353d4194dd24a1627fe to before b3798d3519eda9c409bb0815b0102f27ec42468dAffected
  • 05cbc0db03e82128f2e7e353d4194dd24a1627fe to before 73a11588751a2c13f25d9da8117efc9a79b1843fAffected
  • 05cbc0db03e82128f2e7e353d4194dd24a1627fe to before c61aede097d350d890fa1edc9521b0072e14a0b8Affected
  • 05cbc0db03e82128f2e7e353d4194dd24a1627fe to before e6b6f027e2854a51f345a5e3e808d7a88001d4f8Affected
  • 05cbc0db03e82128f2e7e353d4194dd24a1627fe to before b14cc8afbbcbc6dce4797913c0b85266b897f541Affected
  • 05cbc0db03e82128f2e7e353d4194dd24a1627fe to before 2a85388f1d94a9f8b5a529118a2c5eaa0520d85cAffected
LinuxLinux
  • 4.1Affected
  • before 4.1Not affected
  • 4.14.290 through 4.14.*Not affected
  • 4.19.254 through 4.19.*Not affected
  • 5.4.208 through 5.4.*Not affected
  • 5.10.134 through 5.10.*Not affected
  • 5.15.58 through 5.15.*Not affected
  • 5.18.15 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.