|
Vulnerabilities
< Back

CVE-2022-49122

Updated on 26 Feb 2025

Severity

5.5 Medium severity

Details

CVSS score
5.5
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

dm ioctl: prevent potential spectre v1 gadget

It appears like cmd could be a Spectre v1 gadget as it’s supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using array_index_nospec.

Details

Affected product:
AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:
kernel @ 3.10.0 (+18 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Amazon Linux 2 Released
44 kernels
  • 4.14.152-127.182.amzn2
  • 4.14.154-128.181.amzn2
  • 4.14.165-131.185.amzn2
  • 4.14.146-120.181.amzn2
  • 4.14.152-124.171.amzn2
  • 4.14.171-136.231.amzn2
  • 4.14.158-129.185.amzn2
  • 4.14.165-133.209.amzn2
  • 4.14.173-137.228.amzn2
  • 4.14.177-139.254.amzn2
  • 4.14.173-137.229.amzn2
  • 4.14.177-139.253.amzn2
  • 4.14.181-140.257.amzn2
  • 4.14.186-146.268.amzn2
  • 4.14.181-142.260.amzn2
  • 4.14.192-147.314.amzn2
  • 4.14.193-149.317.amzn2
  • 4.14.198-152.320.amzn2
  • 4.14.200-155.322.amzn2
  • 4.14.203-156.332.amzn2
  • 4.14.209-160.335.amzn2
  • 4.14.214-160.339.amzn2
  • 4.14.209-160.339.amzn2
  • 4.14.219-161.340.amzn2
  • 4.14.225-168.357.amzn2
  • 4.14.231-173.360.amzn2
  • 4.14.219-164.354.amzn2
  • 4.14.225-169.362.amzn2
  • 4.14.232-176.381.amzn2
  • 4.14.232-177.418.amzn2
  • 4.14.238-182.421.amzn2
  • 4.14.238-182.422.amzn2
  • 4.14.231-173.361.amzn2
  • 4.14.241-184.433.amzn2
  • 4.14.243-185.433.amzn2
  • 4.14.246-187.474.amzn2
  • 4.14.248-189.473.amzn2
  • 4.14.252-195.481.amzn2
  • 4.14.252-195.483.amzn2
  • 4.14.256-197.484.amzn2
  • 4.14.262-200.489.amzn2
  • 4.14.268-205.500.amzn2
  • 4.14.273-207.502.amzn2
  • 4.14.275-207.503.amzn2
Amazon Linux 2 5.10 Will Not Fix —
Amazon Linux 2 5.4 Will Not Fix —
CentOS 7 ELS Released
19 kernels
  • 3.10.0-1160.119.1.el7.tuxcare.els10
  • 3.10.0-1160.119.1.el7.tuxcare.els4
  • 3.10.0-1160.119.1.el7.tuxcare.els6
  • 3.10.0-1160.119.1.el7.tuxcare.els15
  • 3.10.0-1160.119.1.el7.tuxcare.els5
  • 3.10.0-1160.119.1.el7.tuxcare.els3
  • 3.10.0-1160.119.1.el7.tuxcare.els14
  • 3.10.0-1160.119.1.el7.tuxcare.els16
  • 3.10.0-1160.119.1.el7.tuxcare.els13
  • 3.10.0-1160.119.1.el7.tuxcare.els7
  • 3.10.0-1160.119.1.el7.tuxcare.els12
  • 3.10.0-1160.119.1.el7.tuxcare.els9
  • 3.10.0-1160.119.1.el7.tuxcare.els8
  • 3.10.0-1160.119.1.el7.tuxcare.els17
  • 3.10.0-1160.119.1.el7.tuxcare.els18
  • 3.10.0-1160.119.1.el7.tuxcare.els19
  • 3.10.0-1160.119.1.el7.tuxcare.els20
  • 3.10.0-1160.119.1.el7.tuxcare.els21
  • 3.10.0-1160.119.1.el7.tuxcare.els22
Debian 11 Planned —
RHEL 8 Planned —
RHEL8 EUS 8.6 Released
42 kernels
  • 4.18.0-372.51.1.el8_6
  • 4.18.0-372.46.1.el8_6
  • 4.18.0-372.41.1.el8_6
  • 4.18.0-372.36.1.el8_6
  • 4.18.0-372.52.1.el8_6
  • 4.18.0-372.57.1.el8_6
  • 4.18.0-372.64.1.el8_6
  • 4.18.0-372.70.1.el8_6
  • 4.18.0-372.75.1.el8_6
  • 4.18.0-372.80.1.el8_6
  • 4.18.0-372.87.1.el8_6
  • 4.18.0-372.91.1.el8_6
  • 4.18.0-372.93.1.el8_6
  • 4.18.0-372.95.1.el8_6
  • 4.18.0-372.98.1.el8_6
  • 4.18.0-372.100.1.el8_6
  • 4.18.0-372.102.1.el8_6
  • 4.18.0-372.105.1.el8_6
  • 4.18.0-372.107.1.el8_6
  • 4.18.0-372.111.1.el8_6
  • 4.18.0-372.118.1.el8_6
  • 4.18.0-372.119.1.el8_6
  • 4.18.0-372.113.1.el8_6
  • 4.18.0-372.109.1.el8_6
  • 4.18.0-372.115.1.el8_6
  • 4.18.0-372.121.1.el8_6
  • 4.18.0-372.123.1.el8_6
  • 4.18.0-372.124.1.el8_6
  • 4.18.0-372.125.1.el8_6
  • 4.18.0-372.126.1.el8_6
  • 4.18.0-372.127.1.el8_6
  • 4.18.0-372.129.1.el8_6
  • 4.18.0-372.131.1.el8_6
  • 4.18.0-372.133.1.el8_6
  • 4.18.0-372.134.1.el8_6
  • 4.18.0-372.137.1.el8_6
  • 4.18.0-372.139.1.el8_6
  • 4.18.0-372.141.1.el8_6
  • 4.18.0-372.142.1.el8_6
  • 4.18.0-372.143.1.el8_6
  • 4.18.0-372.145.1.el8_6
  • 4.18.0-372.149.1.el8_6
RHEL 9 Will Not Fix —
Ubuntu 18.04 Planned —
Ubuntu 18.04 AWS Focal Planned —
Ubuntu 20.04 Planned —
Ubuntu 22.04 Planned —