CVE-2022-49074

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49074
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix GICR_CTLR.RWP polling It turns out that our polling of RWP is totally wrong when checking for it in the redistributors, as we test the *distributor* bit index, whereas it is a different bit number in the RDs... Oopsie boo. This is embarassing. Not only because it is wrong, but also because it took *8 years* to notice the blunder... Just fix the damn thing.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0df6664531a12cdd8fc873f0cac0dcb40243d3e9 Patch
https://git.kernel.org/stable/c/3c07cc242baf83f0bddbbd9d7945d0bee56d8b57 Patch
https://git.kernel.org/stable/c/60e1eb4811f53f5f60c788297d978515e7a2637a Patch
https://git.kernel.org/stable/c/6fef3e3179e6ed8fecdd004ede541674ffa7749d Patch
https://git.kernel.org/stable/c/7218a789abb3e033f5f3a85636ca50d9ae7b0fc9 Patch
https://git.kernel.org/stable/c/c7daf1b4ad809692d5c26f33c02ed8a031066548 Patch
https://git.kernel.org/stable/c/ff24114bb08d8b90edf2aff0a4fd0689523e6c17 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
History

14 Oct 2025, 20:31

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/0df6664531a12cdd8fc873f0cac0dcb40243d3e9 - () https://git.kernel.org/stable/c/0df6664531a12cdd8fc873f0cac0dcb40243d3e9 - Patch
References () https://git.kernel.org/stable/c/3c07cc242baf83f0bddbbd9d7945d0bee56d8b57 - () https://git.kernel.org/stable/c/3c07cc242baf83f0bddbbd9d7945d0bee56d8b57 - Patch
References () https://git.kernel.org/stable/c/60e1eb4811f53f5f60c788297d978515e7a2637a - () https://git.kernel.org/stable/c/60e1eb4811f53f5f60c788297d978515e7a2637a - Patch
References () https://git.kernel.org/stable/c/6fef3e3179e6ed8fecdd004ede541674ffa7749d - () https://git.kernel.org/stable/c/6fef3e3179e6ed8fecdd004ede541674ffa7749d - Patch
References () https://git.kernel.org/stable/c/7218a789abb3e033f5f3a85636ca50d9ae7b0fc9 - () https://git.kernel.org/stable/c/7218a789abb3e033f5f3a85636ca50d9ae7b0fc9 - Patch
References () https://git.kernel.org/stable/c/c7daf1b4ad809692d5c26f33c02ed8a031066548 - () https://git.kernel.org/stable/c/c7daf1b4ad809692d5c26f33c02ed8a031066548 - Patch
References () https://git.kernel.org/stable/c/ff24114bb08d8b90edf2aff0a4fd0689523e6c17 - () https://git.kernel.org/stable/c/ff24114bb08d8b90edf2aff0a4fd0689523e6c17 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: irqchip/gic-v3: Corregir sondeo de GICR_CTLR.RWP Resulta que nuestro sondeo de RWP es totalmente erróneo al comprobarlo en los redistribuidores, ya que probamos el índice de bits del *distribuidor*, mientras que es un número de bit diferente en los RD... Uy, buu. Esto es vergonzoso. No solo porque es incorrecto, sino también porque tardaron *8 años* en darse cuenta del error... Simplemente arreglen la maldita cosa.
First Time Linux
Linux linux Kernel

26 Feb 2025, 07:00

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:00

Updated : 2025-10-14 20:31

NVD link : CVE-2022-49074

Mitre link : CVE-2022-49074

CVE.ORG link : CVE-2022-49074

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo