CVE-2022-49633: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49633 is a vulnerability in the Linux kernel related to data races around sysctlicmpechoenableprobe functionality. The issue occurs when reading sysctlicmpechoenableprobe, as it can be changed concurrently, affecting both IPv4 and IPv6 ICMP implementations (Debian Security).

The vulnerability stems from a race condition in the Linux kernel's ICMP implementation where the sysctlicmpechoenableprobe variable could be accessed without proper synchronization. The issue affects both IPv4 (net/ipv4/icmp.c) and IPv6 (net/ipv6/icmp.c) code paths. The fix involves adding READ_ONCE() to the readers of this variable to ensure proper synchronization (Kernel Commit).

The vulnerability could potentially lead to data races in the kernel's ICMP implementation when handling ICMP PROBE messages as defined in RFC 8335. This affects systems running vulnerable versions of the Linux kernel (Ubuntu Security).

The issue has been fixed in the Linux kernel by adding proper memory barriers using READONCE() for accessing sysctlicmpechoenable_probe. The fix has been backported to various stable kernel versions. Users should update their systems to patched kernel versions that include the fix (Kernel Commit).