CVE-2022-49604

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ip: Fix data-races around sysctl_ip_fwd_use_pmtu.

While reading sysctl_ip_fwd_use_pmtu, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-362

Affected software

VendorProductVersions
LinuxLinux>= f87c10a8aa1e82498c42d0335524d6ae7cf5a52b, < eb15262128b793e4b1d1c4514d3e6d19c3959764; >= f87c10a8aa1e82498c42d0335524d6ae7cf5a52b, < 7828309df0f89419a9349761a37c7d1b0da45697; >= f87c10a8aa1e82498c42d0335524d6ae7cf5a52b, < b96ed5ccb09ae71103023ed13acefb194f609794; >= f87c10a8aa1e82498c42d0335524d6ae7cf5a52b, < 93fbc06da1d819f3981a7bd7928c3641ea67b364; >= f87c10a8aa1e82498c42d0335524d6ae7cf5a52b, < e364b5f6ffbfc457a997ad09a7baa16c19581edc; >= f87c10a8aa1e82498c42d0335524d6ae7cf5a52b, < 60c158dc7b1f0558f6cadd5b50d0386da0000d50
LinuxLinux3.14

References

Timeline

Published
Feb 26, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-496055.5In the Linux kernel, the following vulnerability has been resolved: igc: Reinstate IGC_REMOVED logic and implement it properly The initialCVE-2022-496065.5In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix sleep from invalid context BUG Taking the qos_mutex toCVE-2022-496074.7In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix data race between perf_event_set_output() and perf_mmap_CVE-2022-496085.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: ralink: Check for null return of devm_kcalloc Because of the CVE-2022-496095.5In the Linux kernel, the following vulnerability has been resolved: power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probeCVE-2022-49619.8A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionalitCVE-2022-496105.5In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Prevent RSB underflow before vmenter On VMX, there are some CVE-2022-496115.5In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poiCVE-2022-496127.8In the Linux kernel, the following vulnerability has been resolved: power: supply: core: Fix boundary conditions in interpolation The funcCVE-2022-496135.5In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix PM usage_count for console handover When console is CVE-2022-496155.5In the Linux kernel, the following vulnerability has been resolved: ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error ThCVE-2022-496165.5In the Linux kernel, the following vulnerability has been resolved: ASoC: rt7*-sdw: harden jack_detect_handler Realtek headset codec drive