Linux Kernel IGMP Sysctl Data-Race Vulnerability

A data-race vulnerability has been identified in the Linux kernel's IGMP (Internet Group Management Protocol) handling. The issue arises in the sysctl_igmp_llm_reports variable, which can be modified concurrently while being read. This vulnerability affects multiple versions of the Linux kernel that handle IGMP reports. To address this issue, the READ_ONCE() function needs to be added to the variable's readers, ensuring proper synchronization.

Impact

Exploitation of this vulnerability can lead to inconsistent or unexpected behavior in the handling of IGMP reports, potentially causing issues in multicast traffic management.