Linux Kernel Sysctl Data-Race Vulnerability

A data-race vulnerability has been identified in the Linux kernel's sysctl interface, specifically within the proc_dou8vec_minmax() function. This vulnerability arises because a sysctl variable can be accessed concurrently, leading to potential load/store tearing. Although proc_dou8vec_minmax() can currently tolerate such data-races, it requires additional annotations to address the issue properly. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability could lead to data corruption or unpredictable behavior in the sysctl interface, allowing for concurrent read and write operations to interfere with each other.