CVE-2022-49632: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49632 is a data race vulnerability discovered in the Linux kernel's ICMP error handling mechanism. The issue specifically affects the sysctlicmperrorsuseinbound_ifaddr variable, which can be concurrently modified while being read, leading to potential race conditions (Kernel Commit).

The vulnerability exists in the Linux kernel's ICMP implementation where the sysctlicmperrorsuseinboundifaddr variable could be accessed without proper synchronization. The issue was fixed by adding READONCE() to the reader of this variable to ensure atomic access. The vulnerability has a CVSS v3.1 Base Score of 4.7 (Medium) with the following vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H (AttackerKB).

The vulnerability primarily affects system availability. According to the CVSS metrics, while there is no impact on confidentiality or integrity, it can have a high impact on system availability due to potential race conditions in ICMP error handling (AttackerKB).

The vulnerability has been patched in the Linux kernel by adding READONCE() to properly handle concurrent access to sysctlicmperrorsuseinboundifaddr. The fix was implemented in commit d2efabce81db7eed1c98fa1a3f203f0edd738ac3 (Kernel Commit).