In the Linux kernel, the following vulnerability has been resolved: virtio_console: eliminate anonymous module_init & module_exit Eliminate anonymous module_init() and module_exit(), which can lead to confusion or ambiguity when reading System.map, crashes/oops/bugs, or an initcall_debug log. Give each of these init and exit functions unique driver-specific names to eliminate the anonymous names. Example 1: (System.map) ffffffff832fc78c t init ffffffff832fc79e t init ffffffff832fc8f8 t init Example 2: (initcall_debug log) calling init+0x0/0x12 @ 1 initcall init+0x0/0x12 returned 0 after 15 usecs calling init+0x0/0x60 @ 1 initcall init+0x0/0x60 returned 0 after 2 usecs calling init+0x0/0x9a @ 1 initcall init+0x0/0x9a returned 0 after 74 usecs

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0f3d824bd70a1303464d5e93ee3e7afe7832fe89 cve-icon cve-icon
https://git.kernel.org/stable/c/3504b0a177208eda85bf472bbf7c9aa77d2b8343 cve-icon cve-icon
https://git.kernel.org/stable/c/3fd5dee7404ce40c79cba468bb2510115639d975 cve-icon cve-icon
https://git.kernel.org/stable/c/44c2d5fbe7b2bd1f8cb114d608a591a73a5d4ae6 cve-icon cve-icon
https://git.kernel.org/stable/c/71612aee09ecea3475f8751dc841d75a011b1fd0 cve-icon cve-icon
https://git.kernel.org/stable/c/7deaddb704713608e0ae559e27185581b9af71a0 cve-icon cve-icon
https://git.kernel.org/stable/c/93e3d88321d2274fa4e26b006e19cc10fec331c2 cve-icon cve-icon
https://git.kernel.org/stable/c/c69b442125bf009fce26e15aa5616caf8a3673c3 cve-icon cve-icon
https://git.kernel.org/stable/c/fefb8a2a941338d871e2d83fbd65fbfa068857bd cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025022600-CVE-2022-49100-1357@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-49100 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-49100 cve-icon
History

Wed, 16 Apr 2025 15:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

Thu, 27 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 26 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: virtio_console: eliminate anonymous module_init & module_exit Eliminate anonymous module_init() and module_exit(), which can lead to confusion or ambiguity when reading System.map, crashes/oops/bugs, or an initcall_debug log. Give each of these init and exit functions unique driver-specific names to eliminate the anonymous names. Example 1: (System.map) ffffffff832fc78c t init ffffffff832fc79e t init ffffffff832fc8f8 t init Example 2: (initcall_debug log) calling init+0x0/0x12 @ 1 initcall init+0x0/0x12 returned 0 after 15 usecs calling init+0x0/0x60 @ 1 initcall init+0x0/0x60 returned 0 after 2 usecs calling init+0x0/0x9a @ 1 initcall init+0x0/0x9a returned 0 after 74 usecs
Title virtio_console: eliminate anonymous module_init & module_exit
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-02-26T01:54:51.044Z

Updated: 2025-05-04T08:29:53.050Z

Reserved: 2025-02-26T01:49:39.250Z

Link: CVE-2022-49100

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-02-26T07:00:47.437

Modified: 2025-02-26T07:00:47.437

Link: CVE-2022-49100

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-02-26T00:00:00Z

Links: CVE-2022-49100 - Bugzilla