CVE-2022-49633

icmp: Fix data-races around sysctl_icmp_echo_enable_probe.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

icmp: Fix data-races around sysctl_icmp_echo_enable_probe.

While reading sysctl_icmp_echo_enable_probe, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before cce955efa0ab81f7fb72e22beed372054c86005cAffected d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before 05c615033174f1d19374f42285ccd8e9af13e427Affected d329ea5bd8845f0b196bf41b18b6173340d6e0e4 to before 4a2f7083cc6cb72dade9a63699ca352fad26d1cdAffected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.56 through 5.15.Not affected 5.18.13 through 5.18.Not affected 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.