CVE-2022-49100 virtio_console: eliminate anonymous module_init & module_exit

Medium 5.5 Published Updated

This fix resolves ambiguity in kernel logs and crash reports caused by anonymous module initialization functions in the virtio_console driver.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2022-49100?

CVE-2022-49100 is a medium-severity vulnerability in Linux kernel, published on 26 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

virtio_console: eliminate anonymous module_init & module_exit

Eliminate anonymous module_init() and module_exit(), which can lead to confusion or ambiguity when reading System.map, crashes/oops/bugs, or an initcall_debug log.

Give each of these init and exit functions unique driver-specific names to eliminate the anonymous names.

Example 1: (System.map) ffffffff832fc78c t init ffffffff832fc79e t init ffffffff832fc8f8 t init

Example 2: (initcall_debug log) calling init+0x0/0x12 @ 1 initcall init+0x0/0x12 returned 0 after 15 usecs calling init+0x0/0x60 @ 1 initcall init+0x0/0x60 returned 0 after 2 usecs calling init+0x0/0x9a @ 1 initcall init+0x0/0x9a returned 0 after 74 usecs

Which versions are affected by CVE-2022-49100?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2022-49100?

Apply the vendor's patch.

Is CVE-2022-49100 being exploited?

There is no known exploitation of CVE-2022-49100 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as DEBIAN-CVE-2022-49100, GHSA-w752-xgwc-m5jm, UBUNTU-CVE-2022-49100.

Is CVE-2022-49100 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free