CVE-2022-49100

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
26/02/2025
Last modified:
14/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> virtio_console: eliminate anonymous module_init &amp; module_exit<br /> <br /> Eliminate anonymous module_init() and module_exit(), which can lead to<br /> confusion or ambiguity when reading System.map, crashes/oops/bugs,<br /> or an initcall_debug log.<br /> <br /> Give each of these init and exit functions unique driver-specific<br /> names to eliminate the anonymous names.<br /> <br /> Example 1: (System.map)<br /> ffffffff832fc78c t init<br /> ffffffff832fc79e t init<br /> ffffffff832fc8f8 t init<br /> <br /> Example 2: (initcall_debug log)<br /> calling init+0x0/0x12 @ 1<br /> initcall init+0x0/0x12 returned 0 after 15 usecs<br /> calling init+0x0/0x60 @ 1<br /> initcall init+0x0/0x60 returned 0 after 2 usecs<br /> calling init+0x0/0x9a @ 1<br /> initcall init+0x0/0x9a returned 0 after 74 usecs

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.9.311 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.10 (including) 4.14.276 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15 (including) 4.19.238 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.189 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.111 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.34 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 5.16.20 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.17 (including) 5.17.3 (excluding)