CVE-2022-49632

icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.

While reading sysctl_icmp_errors_use_inbound_ifaddr, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	1c2fb7f93cb20621772bf304f3dba0849942e5db to before de9490c32bc10020efdd1509689a28f197d6dfb8Affected 1c2fb7f93cb20621772bf304f3dba0849942e5db to before f9617844e4d5d6331dbce3fb19a24e5bda201e58Affected 1c2fb7f93cb20621772bf304f3dba0849942e5db to before d2efabce81db7eed1c98fa1a3f203f0edd738ac3Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.15.56 through 5.15.Not affected 5.18.13 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.