U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2022-49641

Change History

New CVE Received from kernel.org 2/26/2025 2:01:39 AM

Action Type Old Value New Value
Added Description

								
							
							
						
In the Linux kernel, the following vulnerability has been resolved:

sysctl: Fix data races in proc_douintvec().

A sysctl variable is accessed concurrently, and there is always a chance
of data-race.  So, all readers and writers need some basic protection to
avoid load/store-tearing.

This patch changes proc_douintvec() to use READ_ONCE() and WRITE_ONCE()
internally to fix data-races on the sysctl side.  For now, proc_douintvec()
itself is tolerant to a data-race, but we still need to add annotations on
the other subsystem's side.
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/4762b532ec9539755aab61445d5da6e1926ccb99
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/630c76850d554d7140232e71b5d1663e88cffb54
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/d335db59f7fb3353f56e52371f1ee796ae9c8f09
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/d5d54714e329f646bd7af4994fc427d88ee68936