QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-49640

Back to search

CVE-2022-49640

Published: Feb 26, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix data races in proc_douintvec_minmax(). A sysctl variable is accessed concurrently, and there is always a chance of data-race. So, all readers and writers need some basic protection to avoid load/store-tearing. This patch changes proc_douintvec_minmax() to use READ_ONCE() and WRITE_ONCE() internally to fix data-races on the sysctl side. For now, proc_douintvec_minmax() itself is tolerant to a data-race, but we still need to add annotations on the other subsystem's side.

VendorProductVersions

Linux

Linux

affected
61d9b56a89208d8cccd0b4cfec7e6959717e16e3 - < e3a2144b3b6bf9ecafd91087c8b8b48171ec19df
affected
61d9b56a89208d8cccd0b4cfec7e6959717e16e3 - < 40e0477a7371d101c55b69d9c32a7a1ed82ab5ea
affected
61d9b56a89208d8cccd0b4cfec7e6959717e16e3 - < b60eddf98b9716651069dfda296c91311a7a6293
affected
61d9b56a89208d8cccd0b4cfec7e6959717e16e3 - < 2d3b559df3ed39258737789aae2ae7973d205bc1

Linux

Linux

affected
4.13
unaffected
0 - < 4.13
unaffected
5.10.132 - <= 5.10.*
unaffected
5.15.56 - <= 5.15.*
unaffected
5.18.13 - <= 5.18.*

+1 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now