CVE-2022-49100 virtio_console: eliminate anonymous module_init & module_exit
This fix resolves ambiguity in kernel logs and crash reports caused by anonymous module initialization functions in the virtio_console driver.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-49100?
CVE-2022-49100 is a medium-severity vulnerability in Linux kernel, published on 26 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
virtio_console: eliminate anonymous module_init & module_exit
Eliminate anonymous module_init() and module_exit(), which can lead to confusion or ambiguity when reading System.map, crashes/oops/bugs, or an initcall_debug log.
Give each of these init and exit functions unique driver-specific names to eliminate the anonymous names.
Example 1: (System.map) ffffffff832fc78c t init ffffffff832fc79e t init ffffffff832fc8f8 t init
Example 2: (initcall_debug log) calling init+0x0/0x12 @ 1 initcall init+0x0/0x12 returned 0 after 15 usecs calling init+0x0/0x60 @ 1 initcall init+0x0/0x60 returned 0 after 2 usecs calling init+0x0/0x9a @ 1 initcall init+0x0/0x9a returned 0 after 74 usecs
Which versions are affected by CVE-2022-49100?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2022-49100?
Apply the vendor's patch.
Is CVE-2022-49100 being exploited?
There is no known exploitation of CVE-2022-49100 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2022-49100, GHSA-w752-xgwc-m5jm, UBUNTU-CVE-2022-49100.