In the Linux kernel, the following vulnerability has been resolved:
dm ioctl: prevent potential spectre v1 gadget
It appears like cmd could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using arrayindexnospec.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49122.json"
}[
{
"digest": {
"length": 1306.0,
"function_hash": "205062802883004681173570094174577349760"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2022-49122-114f087b",
"target": {
"function": "lookup_ioctl",
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0320bac5801b31407200227173205d017488f140"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"282320192241187242750080475658947063016",
"160660308140842968053998136245224904602",
"97214352431319966316016703559877698394",
"225286820874719672596686776554634347333",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2022-49122-2cb11d10",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02cc46f397eb3691c56affbd5073e54f7a82ac32"
},
{
"digest": {
"length": 1253.0,
"function_hash": "296808189775282972958648659416558151590"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2022-49122-65b91929",
"target": {
"function": "lookup_ioctl",
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ae2c5b89da3cfaf856df880af27d3bb32a74b3d"
},
{
"digest": {
"length": 1306.0,
"function_hash": "205062802883004681173570094174577349760"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2022-49122-7345be8f",
"target": {
"function": "lookup_ioctl",
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02cc46f397eb3691c56affbd5073e54f7a82ac32"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"282768960027606426768233461973943893316",
"160660308140842968053998136245224904602",
"253085569798082418358262991581004122708",
"124651114137634160148300505474397380665",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2022-49122-d5271c34",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ae2c5b89da3cfaf856df880af27d3bb32a74b3d"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"282768960027606426768233461973943893316",
"9607946198688243547172952770918314702",
"329748063400609661529813743317490360886",
"92876952710526202054635027591630807844",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2022-49122-e236c817",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76c94651005f58885facf9c973007f5ea01ab01f"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"282768960027606426768233461973943893316",
"160660308140842968053998136245224904602",
"253085569798082418358262991581004122708",
"124651114137634160148300505474397380665",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
]
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2022-49122-eed03cbb",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0320bac5801b31407200227173205d017488f140"
},
{
"digest": {
"length": 1056.0,
"function_hash": "218172111784046527622655333823092413113"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2022-49122-fd126b77",
"target": {
"function": "lookup_ioctl",
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76c94651005f58885facf9c973007f5ea01ab01f"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49122.json"