PT-2025-8572 · Linux+3 · Linux Kernel+3

Kuniyuki Iwashima · Published 2023-05-09 · Updated 2025-02-27 · CVE-2022-49639

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data-race issue exists in the Linux kernel related to the cipso sysctl variables. When reading these variables, they can be changed concurrently, which can lead to data-races. To address this, the use of READ ONCE() is necessary to prevent such data-races.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CESA-2023_7077

CVE-2022-49639

RHSA-2023:2458

RHSA-2023:7077

RHSA-2023_2458

RHSA-2023_7077

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49639.json · Exploit
• https://ubuntu.com/security/CVE-2022-49639 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49639 · Vendor Advisory
• https://git.kernel.org/stable/c/59e26906b89cc35bb54476498772b45cbc32323f · Patch
• https://git.kernel.org/stable/c/c321e99d2725d11f7e6a4ebd9ce752259f0bae81 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49639 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49639 · Vendor Advisory
• https://git.kernel.org/stable/c/dd44f04b9214adb68ef5684ae87a81ba03632250 · Patch
• https://git.kernel.org/stable/c/07b0caf8aeb9b82e6ecc6c292a3e47c7fcdb1148 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49639 · Vendor Advisory
• https://git.kernel.org/stable/c/ca26ca5e2f3eeb3e6fe699cd6effa3b4b2aa8698 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49639 · Security Note
• https://git.kernel.org/stable/c/0e41a0f73ccb9be112a80bde3804a771633caaef · Patch
• https://git.kernel.org/stable/c/2764f82bbc158d106693ae3ced3675cf4b963b35 · Patch
• https://git.kernel.org/stable/c/fe2a35fa2c4f9c8ce5ef970eb927031387f9446a · Patch