SB20250226671 - Race condition within a thread in Linux kernel
Published: February 26, 2025 Updated: May 11, 2025
Security Bulletin ID
SB20250226671
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Race condition within a thread (CVE-ID: CVE-2022-49640)
The vulnerability allows a local user to corrupt data.
The vulnerability exists due to a data race within the do_proc_douintvec_minmax_conv() function in kernel/sysctl.c. A local user can corrupt data.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/2d3b559df3ed39258737789aae2ae7973d205bc1
- https://git.kernel.org/stable/c/40e0477a7371d101c55b69d9c32a7a1ed82ab5ea
- https://git.kernel.org/stable/c/b60eddf98b9716651069dfda296c91311a7a6293
- https://git.kernel.org/stable/c/e3a2144b3b6bf9ecafd91087c8b8b48171ec19df
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.132