CVE-2022-49633: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49633 is a vulnerability in the Linux kernel related to data races around sysctl_icmp_echo_enable_probe functionality. The issue occurs when reading sysctl_icmp_echo_enable_probe, as it can be changed concurrently, affecting both IPv4 and IPv6 ICMP implementations (Debian Security).

The vulnerability stems from a race condition in the Linux kernel's ICMP implementation where the sysctl_icmp_echo_enable_probe variable could be accessed without proper synchronization. The issue affects both IPv4 (net/ipv4/icmp.c) and IPv6 (net/ipv6/icmp.c) code paths. The fix involves adding READ_ONCE() to the readers of this variable to ensure proper synchronization (Kernel Commit).

The vulnerability could potentially lead to data races in the kernel's ICMP implementation when handling ICMP PROBE messages as defined in RFC 8335. This affects systems running vulnerable versions of the Linux kernel (Ubuntu Security).

The issue has been fixed in the Linux kernel by adding proper memory barriers using READ_ONCE() for accessing sysctl_icmp_echo_enable_probe. The fix has been backported to various stable kernel versions. Users should update their systems to patched kernel versions that include the fix (Kernel Commit).