Kernel Oops Vulnerability in Linux Package: CVE-2022-49868
Summary
CVE-2022-49868: In the Linux kernel, the following vulnerability has been resolved: phy: ralink: mt7621-pci: add sentinel to quirks table With mt7621 soc_dev_attr fixed to register the soc as a device, kernel will experience an oops in... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware and system resources. It provides essential services for all other parts of the system, including process management, memory management, and device control. The vulnerability CVE-2022-49868 affects the Linux kernel versions prior to 6.0.10-1 in Debian 12 and 13, specifically related to the Ralink MT7621 PCIe PHY driver. This issue arises from improper handling of device attributes, leading to potential system instability.
Vulnerability Detail
CVE-2022-49868 is a vulnerability in the Linux kernel that causes an oops (a type of kernel error) when the soc_device_match_attr function is invoked. This issue stems from a quirk test introduced in the staging driver, which was later removed and re-added. The vulnerability can lead to system crashes or unexpected behavior, particularly affecting systems utilizing the MT7621 SoC. The problem is linked to the mishandling of device attributes, which can disrupt normal operations.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux package.
Conclusion
CVE-2022-49868 is a significant vulnerability in the Linux kernel that can lead to system crashes. It is crucial for users of affected versions to update to the patched version 6.0.10-1 to ensure system stability and security. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the integrity of your software.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49868 is a vulnerability in the Linux kernel that can cause system instability due to improper handling of device attributes.
The vulnerability affects Linux kernel versions prior to 6.0.10-1 in Debian 12 and 13.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds, it is advisable to monitor your system closely for any unusual behavior until you can apply the update.
More information can be found in the official CVE database or by visiting the provided source link in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.