CVE-2022-49054

Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests

State: Published
Severity: 7.1 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests

hv_panic_page might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests.

While at it, update some comments in hyperv_{panic,die}_event().

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a6c76bb08dc7f7ff2b1c381002eb6c7211746182 to before 1b576e81d31b56b248316b8ff816b1cc5c4407c7Affected a6c76bb08dc7f7ff2b1c381002eb6c7211746182 to before 6230bc50d6d21cae4c084766623d0a6d17958721Affected a6c76bb08dc7f7ff2b1c381002eb6c7211746182 to before 9f8b577f7b43b2170628d6c537252785dcc2dceaAffected
LinuxLinux	5.12Affected before 5.12Not affected 5.15.35 through 5.15.Not affected 5.17.4 through 5.17.Not affected 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.