// For flags

CVE-2022-49098

Drivers: hv: vmbus: Fix potential crash on module unload

Time Line
Published
2024-03-19
Updated
2024-03-19
Firt exploit
2024-03-19
Overview
Descriptions (1)
MITRE
CWE (0)
CAPEC (-)
Risk
CVSS Score
-
SSVC
-
KEV
-
EPSS
Affected Products (-)
Vendors (1)
linux
Products (1)
linux_kernel
Versions (8)
>= 4.19.118 < 4.19.238, >= 5.4.35 < 5.4.189, >= 5.7 < 5.10.111, >= 5.7 < 5.15.34, >= 5.7 < 5.16.20, >= 5.7 < 5.17.3, >= 5.7 < 5.18, 5.6.7
Intel Resources (-)
Advisories (-)
-
Exploits (-)
-
Plugins (-)
-
References (11)
General (4)
kernel
Exploits & POcs (-)
Patches (7)
kernel
Advisories (-)
Summary
Descriptions

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix potential crash on module unload The vmbus driver relies on the panic notifier infrastructure to perform
some operations when a panic event is detected. Since vmbus can be built
as module, it is required that the driver handles both registering and
unregistering such panic notifier callback. After commit 74347a99e73a ("x86/Hyper-V: Unload vmbus channel in hv panic callback")
though, the panic notifier registration is done unconditionally in the module
initialization routine whereas the unregistering procedure is conditionally
guarded and executes only if HV_FEATURE_GUEST_CRASH_MSR_AVAILABLE capability
is set. This patch fixes that by unconditionally unregistering the panic notifier
in the module's exit routine as well.

*Credits: N/A
CVSS Scores
Attack Vector
-
Attack Complexity
-
Privileges Required
-
User Interaction
-
Scope
-
Confidentiality
-
Integrity
-
Availability
-
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2025-02-26 CVE Reserved
  • 2025-02-26 CVE Published
  • 2025-02-26 CVE Updated
  • ---------- EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Threat Intelligence Resources (0)
Security Advisory details:

Select an advisory to view details here.

Select an exploit to view details here.

Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
>= 4.19.118 < 4.19.238
Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19.118 < 4.19.238"
en
Affected
Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
>= 5.4.35 < 5.4.189
Search vendor "Linux" for product "Linux Kernel" and version " >= 5.4.35 < 5.4.189"
en
Affected
Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
>= 5.7 < 5.10.111
Search vendor "Linux" for product "Linux Kernel" and version " >= 5.7 < 5.10.111"
en
Affected
Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
>= 5.7 < 5.15.34
Search vendor "Linux" for product "Linux Kernel" and version " >= 5.7 < 5.15.34"
en
Affected
Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
>= 5.7 < 5.16.20
Search vendor "Linux" for product "Linux Kernel" and version " >= 5.7 < 5.16.20"
en
Affected
Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
>= 5.7 < 5.17.3
Search vendor "Linux" for product "Linux Kernel" and version " >= 5.7 < 5.17.3"
en
Affected
Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
>= 5.7 < 5.18
Search vendor "Linux" for product "Linux Kernel" and version " >= 5.7 < 5.18"
en
Affected
Linux
Search vendor "Linux"
Linux Kernel
Search vendor "Linux" for product "Linux Kernel"
5.6.7
Search vendor "Linux" for product "Linux Kernel" and version "5.6.7"
en
Affected