CVE-2022-49633
published 2025-02-26CVE-2022-49633: In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl_icmp_echo_enable_probe. While reading…
PriorityP414medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
EPSS
0.17%
7.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
While reading sysctl_icmp_echo_enable_probe, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= d329ea5bd8845f0b196bf41b18b6173340d6e0e4 < cce955efa0ab81f7fb72e22beed372054c86005c | cce955efa0ab81f7fb72e22beed372054c86005c |
| linux | linux | >= d329ea5bd8845f0b196bf41b18b6173340d6e0e4 < 05c615033174f1d19374f42285ccd8e9af13e427 | 05c615033174f1d19374f42285ccd8e9af13e427 |
| linux | linux | >= d329ea5bd8845f0b196bf41b18b6173340d6e0e4 < 4a2f7083cc6cb72dade9a63699ca352fad26d1cd | 4a2f7083cc6cb72dade9a63699ca352fad26d1cd |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 0 < 5.18.14-1 | 5.18.14-1 |
| linux | linux_kernel | >= 5.13 < 5.15.56 | 5.15.56 |
| linux | linux_kernel | >= 5.16 < 5.18.13 | 5.18.13 |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
osv4.7MEDIUM
vendor_debian4.7MEDIUM
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v6v7-p6g2-52pc: In the Linux kernel, the following vulnerability has been resolved:
icmp: Fix data-races around sysctl_icmp_echo_enable_probe
ghsa_unreviewed·2025-03-12
CVE-2022-49633 [MEDIUM] CWE-362 GHSA-v6v7-p6g2-52pc: In the Linux kernel, the following vulnerability has been resolved:
icmp: Fix data-races around sysctl_icmp_echo_enable_probe
In the Linux kernel, the following vulnerability has been resolved:
icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
While reading sysctl_icmp_echo_enable_probe, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
OSV
CVE-2022-49633: In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl_icmp_echo_enable_probe
osv·2025-02-26·CVSS 4.7
CVE-2022-49633 [MEDIUM] CVE-2022-49633: In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl_icmp_echo_enable_probe
In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl_icmp_echo_enable_probe. While reading sysctl_icmp_echo_enable_probe, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.
Red Hat
kernel: icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
vendor_redhat·2025-02-26·CVSS 4.7
CVE-2022-49633 [MEDIUM] kernel: icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
kernel: icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
In the Linux kernel, the following vulnerability has been resolved:
icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
While reading sysctl_icmp_echo_enable_probe, it can be changed
concurrently. Thus, we need to add READ_ONCE() to its readers.
Statement: Only corruption of int value during read could happen (and no known scenarios of attack, so unlikely that attacker can trigger it remotely or local user without privileges can trigger it). The problem could happen when using particular kind of ICMP packets for IPV6 (so not actual until IPV6 enabled and ICMP being used). The security impact is limited.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out
Debian
CVE-2022-49633: linux - In the Linux kernel, the following vulnerability has been resolved: icmp: Fix d...
vendor_debian·2022·CVSS 4.7
CVE-2022-49633 [MEDIUM] CVE-2022-49633: linux - In the Linux kernel, the following vulnerability has been resolved: icmp: Fix d...
In the Linux kernel, the following vulnerability has been resolved: icmp: Fix data-races around sysctl_icmp_echo_enable_probe. While reading sysctl_icmp_echo_enable_probe, it can be changed concurrently. Thus, we need to add READ_ONCE() to its readers.
Scope: local
bookworm: resolved (fixed in 5.18.14-1)
bullseye: resolved
forky: resolved (fixed in 5.18.14-1)
sid: resolved (fixed in 5.18.14-1)
trixie: resolved (fixed in 5.18.14-1)
No detection rules found.
No public exploits indexed.
2025-02-26
Published