Linux Kernel TCP Data-Race Vulnerability in sysctl_tcp_ecn_fallback

A data-race vulnerability has been identified in the Linux kernel's TCP implementation, specifically around the sysctl_tcp_ecn_fallback parameter. This vulnerability arises because the parameter can be changed concurrently while it is being read, leading to potential inconsistencies. To address this issue, the kernel has been updated to use READ_ONCE() when reading sysctl_tcp_ecn_fallback.

Impact

The vulnerability could lead to a data race condition, allowing for concurrent modifications and reads of the sysctl_tcp_ecn_fallback parameter, which could cause unexpected behavior in TCP ECN (Explicit Congestion Notification) handling.