CVE-2022-49586

Technical details about CVE-2022-49586 are not provided in the connected documents. The sources only reiterate that the Linux kernel fix involved reading of sysctl_tcp_fastopen and a READ_ONCE() addition. Monitor for vendor updates.

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the presence of data contention in sysctltcpfastopen...

kernel: tcp: Fix data-races around sysctl_tcp_fastopen.

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpfastopen. While reading sysctltcpfastopen, it can be changed concurrently. Thus, we need to add READONCE to its readers...