Linux Kernel Sysctl Data Race Vulnerability

A data race vulnerability has been identified in the Linux kernel's sysctl interface, specifically within the 'proc_douintvec_minmax()' function. This vulnerability arises because sysctl variables can be accessed concurrently, leading to potential data races. Although 'proc_douintvec_minmax()' can currently tolerate such data races, the function lacked proper annotations to prevent load/store tearing. The recently applied patch addresses this issue by modifying 'proc_douintvec_minmax()' to use 'READ_ONCE()' and 'WRITE_ONCE()' for internal data handling, thereby mitigating the data race on the sysctl side.

Impact

Exploitation of this vulnerability could lead to data corruption due to concurrent access, where simultaneous read and write operations could interfere with each other, causing inconsistent or incorrect data to be processed or stored.