CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.7. It affects Linux.
CVE
CVE-2022-49634
Severity
MEDIUM
CVSS
4.7
EPSS
0.18%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data-races in proc_dou8vec_minmax(). A sysctl variable is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. This patch changes proc_dou8vec_minmax() to use READ_ONCE() and WRITE_ONCE() internally to fix data-races on the sysctl side. For now, proc_dou8vec_minmax() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side.
Related CVEs
Other vulnerabilities affecting the same vendor(s)