CVE-2022-49054

HIGH

Linux Kernel - Information Exposure via hv_panic_page in Isolated Guests

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests hv_panic_page might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests. While at it, update some comments in hyperv_{panic,die}_event().

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/1b576e81d31b56b248316b8ff816b1cc5c4407c7

Patch

https://git.kernel.org/stable/c/6230bc50d6d21cae4c084766623d0a6d17958721

Patch

https://git.kernel.org/stable/c/9f8b577f7b43b2170628d6c537252785dcc2dcea

Scores

CVSS v3 7.1

EPSS 0.0029

EPSS Percentile 21.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Details

Status published

Products (12)

linux/Kernel 5.12.0 - 5.15.35linux

linux/Kernel 5.16.0 - 5.17.4linux

Linux/Linux < 5.12

Linux/Linux 5.12

Linux/Linux 5.15.35 - 5.15.*

Linux/Linux 5.17.4 - 5.17.*

Linux/Linux 5.18

Linux/Linux a6c76bb08dc7f7ff2b1c381002eb6c7211746182 - 1b576e81d31b56b248316b8ff816b1cc5c4407c7

Linux/Linux a6c76bb08dc7f7ff2b1c381002eb6c7211746182 - 6230bc50d6d21cae4c084766623d0a6d17958721

Linux/Linux a6c76bb08dc7f7ff2b1c381002eb6c7211746182 - 9f8b577f7b43b2170628d6c537252785dcc2dcea

... and 2 more

Published Feb 26, 2025

Tracked Since Feb 18, 2026