CVE-2022-49611

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49611
In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly is being mitigated.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/17a9fc4a7b91f8599223631bb6ae6416bc0de1c0 Patch
https://git.kernel.org/stable/c/3d323b99ff5c8c57005184056d65f6af5b0479d8 Patch
https://git.kernel.org/stable/c/4d7f72b6e1bc630bec7e4cd51814bc2b092bf153 Patch
https://git.kernel.org/stable/c/8c38306e2e9257af4af2819aa287a4711ff36329 Patch
https://git.kernel.org/stable/c/8d5cff499a6d740c91ff37963907e0e983c37f0f Patch
https://git.kernel.org/stable/c/9756bba28470722dacb79ffce554336dd1f6a6cd Patch
https://git.kernel.org/stable/c/f744b88dfc201bf8092833ec70b23c720188b527 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*
History

23 Oct 2025, 12:08

Type Values Removed Values Added
CWE NVD-CWE-noinfo
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/speculation: Fill RSB on vmexit for IBRS Prevenir ataques de envenenamiento/subdesbordamiento de RSB con RSB. Mientras tanto, agregue una serie de comentarios para intentar documentar el estado actual del conocimiento tribal sobre los ataques RSB y qué se está mitigando exactamente.
References () https://git.kernel.org/stable/c/17a9fc4a7b91f8599223631bb6ae6416bc0de1c0 - () https://git.kernel.org/stable/c/17a9fc4a7b91f8599223631bb6ae6416bc0de1c0 - Patch
References () https://git.kernel.org/stable/c/3d323b99ff5c8c57005184056d65f6af5b0479d8 - () https://git.kernel.org/stable/c/3d323b99ff5c8c57005184056d65f6af5b0479d8 - Patch
References () https://git.kernel.org/stable/c/4d7f72b6e1bc630bec7e4cd51814bc2b092bf153 - () https://git.kernel.org/stable/c/4d7f72b6e1bc630bec7e4cd51814bc2b092bf153 - Patch
References () https://git.kernel.org/stable/c/8c38306e2e9257af4af2819aa287a4711ff36329 - () https://git.kernel.org/stable/c/8c38306e2e9257af4af2819aa287a4711ff36329 - Patch
References () https://git.kernel.org/stable/c/8d5cff499a6d740c91ff37963907e0e983c37f0f - () https://git.kernel.org/stable/c/8d5cff499a6d740c91ff37963907e0e983c37f0f - Patch
References () https://git.kernel.org/stable/c/9756bba28470722dacb79ffce554336dd1f6a6cd - () https://git.kernel.org/stable/c/9756bba28470722dacb79ffce554336dd1f6a6cd - Patch
References () https://git.kernel.org/stable/c/f744b88dfc201bf8092833ec70b23c720188b527 - () https://git.kernel.org/stable/c/f744b88dfc201bf8092833ec70b23c720188b527 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.19:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-10-23 12:08

NVD link : CVE-2022-49611

Mitre link : CVE-2022-49611

CVE.ORG link : CVE-2022-49611

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo