CVE-2022-49579
published 2025-02-26CVE-2022-49579: In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. While reading…
PriorityP414medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
EPSS
0.18%
8.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.
While reading sysctl_fib_multipath_hash_policy, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.16-1 (bookworm) | linux 5.18.16-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 < 21fb844bc1dc1461f5038d655aa1a14f39e13049 | 21fb844bc1dc1461f5038d655aa1a14f39e13049 |
| linux | linux | >= bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 < 918ee6592ab9a2ff5316d06cfd4aaef60ccabec6 | 918ee6592ab9a2ff5316d06cfd4aaef60ccabec6 |
| linux | linux | >= bf4e0a3db97eb882368fd82980b3b1fa0b5b9778 < 7998c12a08c97cc26660532c9f90a34bd7d8da5a | 7998c12a08c97cc26660532c9f90a34bd7d8da5a |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.18.16-1 | 5.18.16-1 |
| linux | linux_kernel | >= 0 < 5.18.16-1 | 5.18.16-1 |
| linux | linux_kernel | >= 0 < 5.18.16-1 | 5.18.16-1 |
| linux | linux_kernel | >= 4.12 < 5.15.58 | 5.15.58 |
| linux | linux_kernel | >= 5.16 < 5.18.15 | 5.18.15 |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
osv4.7MEDIUM
vendor_debian4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.
vendor_redhat·2025-02-26·CVSS 4.7
CVE-2022-49579 [MEDIUM] CWE-362 kernel: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.
kernel: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.
While reading sysctl_fib_multipath_hash_policy, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
Statement: The bug is that during reading of the variable ipv4.sysctl_fib_multipath_hash_policy potentially could read incorrect value if race happens (if simultaneously value of this variable being changed). Since corruption could happen only during reading and value of variable itself not corrupted and very complex or impossible to trigger the bug, the security impact is limited. Only root user or other privileged user can change value of this variable.
Package:
Debian
CVE-2022-49579: linux - In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix d...
vendor_debian·2022·CVSS 4.7
CVE-2022-49579 [MEDIUM] CVE-2022-49579: linux - In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix d...
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. While reading sysctl_fib_multipath_hash_policy, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.
Scope: local
bookworm: resolved (fixed in 5.18.16-1)
bullseye: open
forky: resolved (fixed in 5.18.16-1)
sid: resolved (fixed in 5.18.16-1)
trixie: resolved (fixed in 5.18.16-1)
GHSA
GHSA-44mr-5383-8m35: In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix data-races around sysctl_fib_multipath_hash_policy
ghsa_unreviewed·2025-03-10
CVE-2022-49579 [MEDIUM] CWE-362 GHSA-44mr-5383-8m35: In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix data-races around sysctl_fib_multipath_hash_policy
In the Linux kernel, the following vulnerability has been resolved:
ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.
While reading sysctl_fib_multipath_hash_policy, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
OSV
CVE-2022-49579: In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy
osv·2025-02-26·CVSS 4.7
CVE-2022-49579 [MEDIUM] CVE-2022-49579: In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy
In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. While reading sysctl_fib_multipath_hash_policy, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.
No detection rules found.
No public exploits indexed.
2025-02-26
Published