Clocksource Hyper-V Unexport __init-annotated hv_init_clocksource() Vulnerability in Linux Kernel
Summary
GSD-2022-1004505: clocksource: hyper-v: unexport __init-annotated hv_init_clocksource(). Affects Kernel versions >= dd2cb348613b44f9d948b068775e159aad298599, < 0414eab7c78f3518143d383e448d44fc573ac6d2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionalities and interfaces for hardware, software, and user applications. The clocksource subsystem in the Linux Kernel is responsible for managing and providing timekeeping services. Hyper-V is a hypervisor developed by Microsoft that allows virtualization on Windows systems. The clocksource: hyper-v module in the Linux Kernel provides support for timekeeping in Hyper-V virtual machines. However, a vulnerability has been discovered in the __init-annotated hv_init_clocksource() function of the clocksource: hyper-v module.
Vulnerability Detail
The clocksource: hyper-v vulnerability arises from the unexported __init-annotated hv_init_clocksource() function. This vulnerability could potentially be exploited by an attacker with local access to a Hyper-V virtual machine to gain elevated privileges or perform denial-of-service attacks. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in Linux Kernel version v5.3 and has been fixed in version v5.15.49 by commit 0414eab7c78f3518143d383e448d44fc573ac6d2.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The clocksource: hyper-v vulnerability in the Linux Kernel can potentially allow an attacker with local access to a Hyper-V virtual machine to gain elevated privileges or perform denial-of-service attacks. It is recommended to update the Linux Kernel to version v5.15.49 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, it could potentially allow an attacker with local access to a Hyper-V virtual machine to gain elevated privileges or perform denial-of-service attacks.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it for open-source vulnerabilities, including this clocksource: hyper-v vulnerability.
Yes, the clocksource: hyper-v vulnerability has been fixed in Linux Kernel version v5.15.49. It is recommended to update to this version or later to mitigate the vulnerability.
No, this vulnerability requires local access to a Hyper-V virtual machine to be exploited.
There are no known instances of this vulnerability being exploited at the moment.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
