CVE-2022-49595

Q: What is the severity of CVE-2022-49595?

CVE-2022-49595 has a CVSS score of 4.7 (MEDIUM). This CVE describes a race condition vulnerability in the Linux kernel's TCP implementation where the sysctl_tcp_probe_threshold variable can be read while being modified concurrently, potentially causing inconsistent behavior. It affects Linux systems with vulnerable kernel versions. The vulnerability requires local access to exploit.

4.7 MEDIUM

Denial of Service

📋 TL;DR

This CVE describes a race condition vulnerability in the Linux kernel's TCP implementation where the sysctl_tcp_probe_threshold variable can be read while being modified concurrently, potentially causing inconsistent behavior. It affects Linux systems with vulnerable kernel versions. The vulnerability requires local access to exploit.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific vulnerable kernel versions referenced in the git commits (need to check exact ranges from provided links)

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: All Linux systems with vulnerable kernel versions are affected regardless of configuration.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

System instability, kernel panic, or denial of service due to inconsistent TCP probe threshold values leading to network performance degradation.

🟠

Likely Case

Minor system instability or performance issues in TCP networking under specific race conditions.

🟢

If Mitigated

Minimal impact with proper kernel patching and standard security controls.

🌐 Internet-Facing: LOW - Requires local access to exploit, not directly exploitable over network.

🏢 Internal Only: MEDIUM - Local attackers could potentially cause system instability or DoS.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: HIGH - Requires precise timing and local access to trigger race condition.

Race conditions are difficult to exploit reliably and require local system access.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions with commits: 44768749980d53bc01980d9c060f736808d11af0, 92c0aa4175474483d6cf373314343d4e624e882a, 96900fa61777402eb5056269d8000aace33a8b6c, 9b5dc7ad6da1373d3c60d4b869d688f996e5d219, b04817c94fbd285a967d9b830b274fe9998c9c0b

Vendor Advisory: https://git.kernel.org/stable/c/44768749980d53bc01980d9c060f736808d11af0

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version. 2. Check distribution-specific security advisories. 3. Reboot system after kernel update.

🔧 Temporary Workarounds

Restrict local access

linux

Limit local user access to systems to reduce attack surface.

🧯 If You Can't Patch

Implement strict access controls to limit local user privileges
Monitor system logs for unusual behavior or instability

🔍 How to Verify

Check if Vulnerable:

Check kernel version with 'uname -r' and compare with affected versions from git commits

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version after update and ensure it includes the fix commits

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
System instability reports
TCP performance degradation

Network Indicators:

Unusual TCP connection behavior

SIEM Query:

Search for kernel panic events or system instability reports in system logs

📊 Metadata

CVE ID: CVE-2022-49595

CVSS v3 Score: 4.7 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-362

EPSS Score: 0.03% exploit probability (7.2th percentile)

Published: February 26, 2025

Last Updated: October 1, 2025

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Restrict local access

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities