SB20250226667 - Race condition within a thread in Linux kernel
Published: February 26, 2025 Updated: May 11, 2025
Security Bulletin ID
SB20250226667
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Race condition within a thread (CVE-ID: CVE-2022-49634)
The vulnerability allows a local user to corrupt data.
The vulnerability exists due to a data race within the proc_dou8vec_minmax() function in kernel/sysctl.c. A local user can corrupt data.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/5f776daef0b5354615ec4b4234cd9539ca05f273
- https://git.kernel.org/stable/c/7dee5d7747a69aa2be41f04c6a7ecfe3ac8cdf18
- https://git.kernel.org/stable/c/e58b02e445463065b4078bf621561da75197853f
- https://git.kernel.org/stable/c/f177b382c33900d0e5a9766493c11a1074076f78
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.178