Linux Kernel ICMP Data-Race Vulnerability in Sysctl Echo Probe

Vulnerability

A data-race vulnerability has been identified in the Linux kernel's ICMP implementation, specifically around the 'sysctl_icmp_echo_enable_probe' variable. This vulnerability arises because the variable can be modified concurrently while it is being read, potentially leading to inconsistent or unexpected behavior. To address this issue, the kernel has been updated to include a 'READ_ONCE()' directive in the readers of this variable, ensuring that concurrent modifications do not interfere with read operations.

Impact

Exploitation of this vulnerability could lead to data inconsistency issues, where concurrent reads and writes to the 'sysctl_icmp_echo_enable_probe' variable could cause unexpected behavior in ICMP echo probing.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.5
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.