Linux Kernel TCP Data-Race Vulnerability in sysctl_tcp_base_mss

A data-race vulnerability has been identified in the Linux kernel's TCP implementation, specifically concerning the sysctl_tcp_base_mss parameter. This vulnerability arises because the parameter can be modified concurrently while it is being read, potentially leading to inconsistent or unexpected behavior. To address this issue, the kernel has been updated to include a READ_ONCE() directive for readers of the sysctl_tcp_base_mss, ensuring that reads are not affected by concurrent writes.

Impact

Exploitation of this vulnerability could lead to data inconsistency issues, where concurrent reads and writes to the sysctl_tcp_base_mss parameter could cause applications to receive incorrect MSS (Maximum Segment Size) values, potentially disrupting TCP communications.