Beveiligingsadvies

CVE-2022-49589

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-26 02:23:23
Laatst bijgewerkt 2026-05-11 19:02:52
Toegewezen door Linux
CVSS-score 4.7
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctl_igmp_qrv. While reading sysctl_igmp_qrv, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers. This test can be packed into a helper, so such changes will be in the follow-up series after net is merged into net-next. qrv ?: READ_ONCE(net->ipv4.sysctl_igmp_qrv);