CVE-2022-49630 Information

Description

In the Linux kernel the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_ecn_fallback.

While reading sysctl_tcp_ecn_fallback it can be changed concurrently. Thus we need to add READ_ONCE() to its reader.

Reference

https://git.kernel.org/stable/c/12b8d9ca7e678abc48195294494f1815b555d658 https://git.kernel.org/stable/c/1ec3d6c2626ee6e1b36b7bd006873a271406ba61 https://git.kernel.org/stable/c/8bcf7339f2cf70ea4461df6ea045d1aadfabfa11