Linux Kernel ICMP Sysctl Data-Race Vulnerability

A data-race vulnerability has been identified in the Linux kernel's ICMP implementation, specifically around the sysctl_icmp_errors_use_inbound_ifaddr variable. This vulnerability arises because the variable can be changed concurrently while it is being read, leading to potential inconsistencies. The issue has been addressed by adding a READ_ONCE() directive to the variable's reader, ensuring safe access and preventing concurrent modification issues.

Impact

Exploitation of this vulnerability could lead to a data race condition, causing inconsistent behavior in ICMP error handling by sysctl.