CVE-2022-49638
Linux Kernel ICMP Data Race Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variables, they can be changed concurrently. So, we need to add READ_ONCE() to avoid data-races.
INFO
Published Date :
Feb. 26, 2025, 7:01 a.m.
Last Modified :
March 11, 2025, 10:32 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update the Linux kernel.
- Apply relevant security patches.
- Restart the system if necessary.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2022-49638.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2022-49638 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2022-49638
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2022-49638 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2022-49638 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Mar. 11, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-362 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.18 from (excluding) 4.9.324 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.10 from (excluding) 4.14.289 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.15 from (excluding) 4.19.253 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 from (excluding) 5.4.207 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 from (excluding) 5.10.132 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 from (excluding) 5.15.56 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 from (excluding) 5.18.13 Added Reference Type kernel.org: https://git.kernel.org/stable/c/0cba7ca667ceb06934746ddd9833a25847bde81d Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/1740e5922fbb705637ae9fa5203db132fc45f9f6 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/48d7ee321ea5182c6a70782aa186422a70e67e22 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/53ecd09ef2fb35fa69667ae8e414ef6b00fd3bf6 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/798c2cf57c63ab39c8aac24d6a3d50f4fa5eeb06 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/e088ceb73c24ab4774da391d54a6426f4bfaefce Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/e2828e8c605853f71267825c9415437c0a93e4f2 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/edeec63b13c252193d626c2a48d7a2f0e7016dc2 Types: Patch -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 26, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl. While reading icmp sysctl variables, they can be changed concurrently. So, we need to add READ_ONCE() to avoid data-races. Added Reference https://git.kernel.org/stable/c/0cba7ca667ceb06934746ddd9833a25847bde81d Added Reference https://git.kernel.org/stable/c/1740e5922fbb705637ae9fa5203db132fc45f9f6 Added Reference https://git.kernel.org/stable/c/48d7ee321ea5182c6a70782aa186422a70e67e22 Added Reference https://git.kernel.org/stable/c/53ecd09ef2fb35fa69667ae8e414ef6b00fd3bf6 Added Reference https://git.kernel.org/stable/c/798c2cf57c63ab39c8aac24d6a3d50f4fa5eeb06 Added Reference https://git.kernel.org/stable/c/e088ceb73c24ab4774da391d54a6426f4bfaefce Added Reference https://git.kernel.org/stable/c/e2828e8c605853f71267825c9415437c0a93e4f2 Added Reference https://git.kernel.org/stable/c/edeec63b13c252193d626c2a48d7a2f0e7016dc2