CVE-2022-49578: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49578 is a vulnerability in the Linux kernel related to data races around sysctl_ip_prot_sock. The vulnerability was discovered when it was found that sysctl_ip_prot_sock is accessed concurrently, creating a potential data race condition. This issue affects the Linux kernel's IP networking subsystem (NVD).

The vulnerability is classified as a race condition (CWE-362) involving concurrent execution using shared resources with improper synchronization. It has been assigned a CVSS v3.1 base score of 4.7 (Medium) with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H. The technical issue stems from the concurrent access to sysctl_ip_prot_sock without proper synchronization mechanisms, which could lead to load/store-tearing (NVD, Kernel Git).

The vulnerability could potentially lead to high availability impacts on the affected system, though there are no direct confidentiality or integrity impacts. The CVSS scoring indicates that while the vulnerability requires local access and is complex to exploit, it could result in high impact to system availability (NVD).

The vulnerability requires local access and high attack complexity to exploit. It needs low privileges and no user interaction. The attack vector is local, meaning an attacker would need to have prior access to the targeted system (NVD).

The vulnerability has been fixed in the Linux kernel through patches that implement proper synchronization mechanisms using READ_ONCE and WRITE_ONCE operations. The fix addresses the data race by adding basic protection to avoid load/store-tearing in all readers and writers of sysctl_ip_prot_sock (Kernel Git).