Unchecked MSR Access Vulnerability in Linux Kernel - CVE-2022-49565
Summary
CVE-2022-49565: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. Affects linux versions < 5.18.16-1. Fixed in 5.18.16-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and security features. However, vulnerabilities can arise, impacting system integrity and performance. CVE-2022-49565 specifically affects the Linux kernel versions prior to 5.18.16-1, where unchecked Model-Specific Register (MSR) access can lead to system errors.
Vulnerability Detail
CVE-2022-49565 is a vulnerability in the Linux kernel that arises from improper handling of Model-Specific Registers (MSRs) related to Intel's Last Branch Record (LBR) functionality. This issue occurs when the TSX (Transactional Synchronization Extensions) is disabled, leading to a failure in applying necessary quirks for LBR access. The vulnerability can trigger unchecked MSR access errors, potentially causing system instability and crashes. The root cause lies in the incorrect invocation order of functions that check for TSX quirks, which can result in improper handling of LBR formats.
How To Fix
Minimum fixed version
5.18.16-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
CVE-2022-49565 is a significant vulnerability in the Linux kernel that can lead to unchecked MSR access errors. It is crucial for users to update their systems to the patched version to ensure stability and security. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49565 is a vulnerability in the Linux kernel that allows for unchecked access to Model-Specific Registers, potentially leading to system errors.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The unchecked MSR access can lead to system instability, crashes, and potential data loss.
Yes, a patch is available in Linux kernel version 5.18.16-1 and later.
While there are no specific workarounds, it is recommended to prioritize updating your kernel to mitigate the risk associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
