CVE-2022-49054

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49054
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests hv_panic_page might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some comments in hyperv_{panic,die}_event().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1b576e81d31b56b248316b8ff816b1cc5c4407c7 Patch
https://git.kernel.org/stable/c/6230bc50d6d21cae4c084766623d0a6d17958721 Patch
https://git.kernel.org/stable/c/9f8b577f7b43b2170628d6c537252785dcc2dcea Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
History

14 Oct 2025, 19:04

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1b576e81d31b56b248316b8ff816b1cc5c4407c7 - () https://git.kernel.org/stable/c/1b576e81d31b56b248316b8ff816b1cc5c4407c7 - Patch
References () https://git.kernel.org/stable/c/6230bc50d6d21cae4c084766623d0a6d17958721 - () https://git.kernel.org/stable/c/6230bc50d6d21cae4c084766623d0a6d17958721 - Patch
References () https://git.kernel.org/stable/c/9f8b577f7b43b2170628d6c537252785dcc2dcea - () https://git.kernel.org/stable/c/9f8b577f7b43b2170628d6c537252785dcc2dcea - Patch
CWE NVD-CWE-noinfo
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Controladores: hv: vmbus: Desactivar sysctl_record_panic_msg de forma predeterminada en invitados aislados hv_panic_page puede contener información confidencial del invitado; no la envíe a Hyper-V de forma predeterminada en invitados aislados. Mientras tanto, actualice algunos comentarios en hyperv_{panic,die}_event().
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-10-14 19:04

NVD link : CVE-2022-49054

Mitre link : CVE-2022-49054

CVE.ORG link : CVE-2022-49054

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo