In the Linux kernel, the following vulnerability has been resolved:
dm ioctl: prevent potential spectre v1 gadget
It appears like cmd could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using arrayindexnospec.
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44e6cb3ab177faae840bb2c1ebda9a2539876184",
"digest": {
"line_hashes": [
"282320192241187242750080475658947063016",
"160660308140842968053998136245224904602",
"97214352431319966316016703559877698394",
"225286820874719672596686776554634347333",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-04f28be6"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd9c88da171a62c4b0f1c70e50c75845969fbc18",
"digest": {
"length": 1306.0,
"function_hash": "205062802883004681173570094174577349760"
},
"id": "CVE-2022-49122-10df0a5f"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0320bac5801b31407200227173205d017488f140",
"digest": {
"length": 1306.0,
"function_hash": "205062802883004681173570094174577349760"
},
"id": "CVE-2022-49122-114f087b"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02cc46f397eb3691c56affbd5073e54f7a82ac32",
"digest": {
"line_hashes": [
"282320192241187242750080475658947063016",
"160660308140842968053998136245224904602",
"97214352431319966316016703559877698394",
"225286820874719672596686776554634347333",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-2cb11d10"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71c8df33fd777c7628f6fbc09b14e84806c55914",
"digest": {
"length": 1306.0,
"function_hash": "205062802883004681173570094174577349760"
},
"id": "CVE-2022-49122-32fb1797"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd86064417de828ff2102ddc6049c829bf7585b4",
"digest": {
"line_hashes": [
"282320192241187242750080475658947063016",
"160660308140842968053998136245224904602",
"97214352431319966316016703559877698394",
"225286820874719672596686776554634347333",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-3f1b426c"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58880025e3362024f6d8ea01cb0c7a5df6c84ba6",
"digest": {
"length": 1253.0,
"function_hash": "296808189775282972958648659416558151590"
},
"id": "CVE-2022-49122-48ffe5c3"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@71c8df33fd777c7628f6fbc09b14e84806c55914",
"digest": {
"line_hashes": [
"282768960027606426768233461973943893316",
"160660308140842968053998136245224904602",
"253085569798082418358262991581004122708",
"124651114137634160148300505474397380665",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-5dc769b4"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ae2c5b89da3cfaf856df880af27d3bb32a74b3d",
"digest": {
"length": 1253.0,
"function_hash": "296808189775282972958648659416558151590"
},
"id": "CVE-2022-49122-65b91929"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@02cc46f397eb3691c56affbd5073e54f7a82ac32",
"digest": {
"length": 1306.0,
"function_hash": "205062802883004681173570094174577349760"
},
"id": "CVE-2022-49122-7345be8f"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58880025e3362024f6d8ea01cb0c7a5df6c84ba6",
"digest": {
"line_hashes": [
"282768960027606426768233461973943893316",
"160660308140842968053998136245224904602",
"253085569798082418358262991581004122708",
"124651114137634160148300505474397380665",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-af1f961b"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44e6cb3ab177faae840bb2c1ebda9a2539876184",
"digest": {
"length": 1306.0,
"function_hash": "205062802883004681173570094174577349760"
},
"id": "CVE-2022-49122-c3fb945d"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ae2c5b89da3cfaf856df880af27d3bb32a74b3d",
"digest": {
"line_hashes": [
"282768960027606426768233461973943893316",
"160660308140842968053998136245224904602",
"253085569798082418358262991581004122708",
"124651114137634160148300505474397380665",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-d5271c34"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76c94651005f58885facf9c973007f5ea01ab01f",
"digest": {
"line_hashes": [
"282768960027606426768233461973943893316",
"9607946198688243547172952770918314702",
"329748063400609661529813743317490360886",
"92876952710526202054635027591630807844",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-e236c817"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd86064417de828ff2102ddc6049c829bf7585b4",
"digest": {
"length": 1306.0,
"function_hash": "205062802883004681173570094174577349760"
},
"id": "CVE-2022-49122-e79f4063"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0320bac5801b31407200227173205d017488f140",
"digest": {
"line_hashes": [
"282768960027606426768233461973943893316",
"160660308140842968053998136245224904602",
"253085569798082418358262991581004122708",
"124651114137634160148300505474397380665",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-eed03cbb"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd9c88da171a62c4b0f1c70e50c75845969fbc18",
"digest": {
"line_hashes": [
"282320192241187242750080475658947063016",
"160660308140842968053998136245224904602",
"97214352431319966316016703559877698394",
"225286820874719672596686776554634347333",
"259753354219226799992843930577093965801",
"328025731638941431404663982046663030007",
"115768619821205762128137062356533692946"
],
"threshold": 0.9
},
"id": "CVE-2022-49122-fa57ed47"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/md/dm-ioctl.c",
"function": "lookup_ioctl"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@76c94651005f58885facf9c973007f5ea01ab01f",
"digest": {
"length": 1056.0,
"function_hash": "218172111784046527622655333823092413113"
},
"id": "CVE-2022-49122-fd126b77"
}
]