QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-49122

Back to search

CVE-2022-49122

Published: Feb 26, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using array_index_nospec.

VendorProductVersions

Linux

Linux

affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 76c94651005f58885facf9c973007f5ea01ab01f
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 58880025e3362024f6d8ea01cb0c7a5df6c84ba6
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 7ae2c5b89da3cfaf856df880af27d3bb32a74b3d
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 0320bac5801b31407200227173205d017488f140
affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - < 71c8df33fd777c7628f6fbc09b14e84806c55914

+4 more versions

Linux

Linux

affected
2.6.12
unaffected
0 - < 2.6.12
unaffected
4.9.311 - <= 4.9.*
unaffected
4.14.276 - <= 4.14.*
unaffected
4.19.238 - <= 4.19.*

+6 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now