CVE-2022-49598

tcp: Fix data-races around sysctl_tcp_mtu_probing.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix data-races around sysctl_tcp_mtu_probing.

While reading sysctl_tcp_mtu_probing, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	5d424d5a674f782d0659a3b66d951f412901faee to before 7e8fc428a7f680f1c4994a40e52d7f95a9a93038Affected 5d424d5a674f782d0659a3b66d951f412901faee to before f966773e13cdd3f12baa90071b7b660f6c633ccbAffected 5d424d5a674f782d0659a3b66d951f412901faee to before 77a04845f0d28a3561494a5f3121488470a968a4Affected 5d424d5a674f782d0659a3b66d951f412901faee to before aabe9438fdfe004e021d5a206227ec105dbe2416Affected 5d424d5a674f782d0659a3b66d951f412901faee to before b0920ca09d9ce19980c8391b9002455baa9c1417Affected 5d424d5a674f782d0659a3b66d951f412901faee to before f47d00e077e7d61baf69e46dde3210c886360207Affected
LinuxLinux	2.6.17Affected before 2.6.17Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

5d424d5a674f782d0659a3b66d951f412901faee to before 7e8fc428a7f680f1c4994a40e52d7f95a9a93038Affected
5d424d5a674f782d0659a3b66d951f412901faee to before f966773e13cdd3f12baa90071b7b660f6c633ccbAffected
5d424d5a674f782d0659a3b66d951f412901faee to before 77a04845f0d28a3561494a5f3121488470a968a4Affected
5d424d5a674f782d0659a3b66d951f412901faee to before aabe9438fdfe004e021d5a206227ec105dbe2416Affected
5d424d5a674f782d0659a3b66d951f412901faee to before b0920ca09d9ce19980c8391b9002455baa9c1417Affected
5d424d5a674f782d0659a3b66d951f412901faee to before f47d00e077e7d61baf69e46dde3210c886360207Affected

LinuxLinux

2.6.17Affected
before 2.6.17Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.