CVE-2022-49603

MEDIUM EPSS 7.6%

Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago

4.7 CVSS 3.1

Medium

Published Feb 26, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ip: Fix data-races around sysctl_ip_fwd_update_priority. While reading sysctl_ip_fwd_update_priority, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.

CVSS Details

Base Score

4.7

Exploitability

1.0

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity High

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

7.6% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-362

Affected Products 10

Vendor	Product	Version	Range
linux	linux_kernel	*	≥4.19 – <5.10.134
linux	linux_kernel	*	≥5.11 – <5.15.58
linux	linux_kernel	*	≥5.16 – <5.18.15
linux	linux_kernel	5.19	any
linux	linux_kernel	5.19	any
linux	linux_kernel	5.19	any
linux	linux_kernel	5.19	any
linux	linux_kernel	5.19	any
linux	linux_kernel	5.19	any
linux	linux_kernel	5.19	any

References 4

git.kernel.org https://git.kernel.org/stable/c/11038fa781ab916535c53351537b22d6d405667d

Patch
git.kernel.org https://git.kernel.org/stable/c/351f81f7d7185d18a9ff76f8f8c2fa8c4eea563b

Patch
git.kernel.org https://git.kernel.org/stable/c/7bf9e18d9a5e99e3c83482973557e9f047b051e7

Patch
git.kernel.org https://git.kernel.org/stable/c/bcc03369d3277ae075ed421f0c8bf4adb5e65b74

Patch

Remediation

git.kernel.org https://git.kernel.org/stable/c/11038fa781ab916535c53351537b22d6d405667d

Patch
git.kernel.org https://git.kernel.org/stable/c/351f81f7d7185d18a9ff76f8f8c2fa8c4eea563b

Patch
git.kernel.org https://git.kernel.org/stable/c/7bf9e18d9a5e99e3c83482973557e9f047b051e7

Patch
git.kernel.org https://git.kernel.org/stable/c/bcc03369d3277ae075ed421f0c8bf4adb5e65b74

Patch