CVE-2022-49603

ip: Fix data-races around sysctl_ip_fwd_update_priority.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ip: Fix data-races around sysctl_ip_fwd_update_priority.

While reading sysctl_ip_fwd_update_priority, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	432e05d328921c68c35bfdeff7d7b7400b8e3d1a to before 11038fa781ab916535c53351537b22d6d405667dAffected 432e05d328921c68c35bfdeff7d7b7400b8e3d1a to before 351f81f7d7185d18a9ff76f8f8c2fa8c4eea563bAffected 432e05d328921c68c35bfdeff7d7b7400b8e3d1a to before bcc03369d3277ae075ed421f0c8bf4adb5e65b74Affected 432e05d328921c68c35bfdeff7d7b7400b8e3d1a to before 7bf9e18d9a5e99e3c83482973557e9f047b051e7Affected
LinuxLinux	4.19Affected before 4.19Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.