CVE-2022-49099 is a Linux kernel vulnerability affecting the hv_vmbus driver, specifically related to the initialization of device objects within the vmbus_device_register() function. This flaw could lead to a denial of service (DoS) due to uninitialized DMA pointers and mask values, as indicated by the WARNING trace. With a CVSS score of 5.5 (Medium), it requires local access and low privileges, has low attack complexity, and its primary impact is high availability loss. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.17, < 5.17.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
5.18CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.