In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix potential crash on module unload The vmbus driver relies on the panic notifier infrastructure to perform some operations when a panic event is detected. Since vmbus can be built as module, it is required that the driver handles both registering and unregistering such panic notifier callback. After commit 74347a99e73a ("x86/Hyper-V: Unload vmbus channel in hv panic callback") though, the panic notifier registration is done unconditionally in the module initialization routine whereas the unregistering procedure is conditionally guarded and executes only if HV_FEATURE_GUEST_CRASH_MSR_AVAILABLE capability is set. This patch fixes that by unconditionally unregistering the panic notifier in the module's exit routine as well.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/2133c422a103cf7c7768c37b9ac382e73b691892 cve-icon cve-icon
https://git.kernel.org/stable/c/3d0078f8bddd58d9bb1ad40bbe929f8633abb276 cve-icon cve-icon
https://git.kernel.org/stable/c/5ea98d0f5f035c1bcf1517ccec0e024ae35a48b2 cve-icon cve-icon
https://git.kernel.org/stable/c/6b4c0149a56147b29169e07000d566162892722a cve-icon cve-icon
https://git.kernel.org/stable/c/792f232d57ff28bbd5f9c4abe0466b23d5879dc8 cve-icon cve-icon
https://git.kernel.org/stable/c/cf580d2e3884dbafd6b90269b03a24d661578624 cve-icon cve-icon
https://git.kernel.org/stable/c/dcd6b1a624c0ffa21034d8b1e02e9d068458f596 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022600-CVE-2022-49098-9755@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49098 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49098 cve-icon
History

Thu, 27 Feb 2025 13:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix potential crash on module unload The vmbus driver relies on the panic notifier infrastructure to perform some operations when a panic event is detected. Since vmbus can be built as module, it is required that the driver handles both registering and unregistering such panic notifier callback. After commit 74347a99e73a ("x86/Hyper-V: Unload vmbus channel in hv panic callback") though, the panic notifier registration is done unconditionally in the module initialization routine whereas the unregistering procedure is conditionally guarded and executes only if HV_FEATURE_GUEST_CRASH_MSR_AVAILABLE capability is set. This patch fixes that by unconditionally unregistering the panic notifier in the module's exit routine as well.
Title Drivers: hv: vmbus: Fix potential crash on module unload
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T01:54:50.073Z

Updated: 2025-05-04T12:44:17.900Z

Reserved: 2025-02-26T01:49:39.250Z

Link: CVE-2022-49098

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-02-26T07:00:47.247

Modified: 2025-02-26T07:00:47.247

Link: CVE-2022-49098

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49098 - Bugzilla