Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nexthop: Fixed issues related to data races around nexthopcompatmode. While reading nexthopcompatmode, it can be changed concurrently. Therefore, we need to add READONCE to its readers...

CVE-2022-49629

The CVE-2022-49629 entry concerns a Linux kernel data race in nexthop_compat_mode where readers could observe concurrent changes. The vulnerability is triggered by reading nexthop_compat_mode while it is modified, and fixes require using READ_ONCE() in readers. Connected advisories (Astra Linux, ...