CVE-2022-49774

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-49774
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49774.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49774
Downstream
Published
2025-05-01T14:09:11Z
Modified
2025-10-14T23:51:02.930588Z
Summary
KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
Details

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/xen: Fix eventfd error handling in kvmxeneventfd_assign()

Should not call eventfdctxput() in case of error.

[Introduce new goto target instead. - Paolo]

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2fd6df2f2b47d4301b1ee0fe9d627d1c061a5988
Fixed
d76f46f47dfde220712d1420ee5dbc546c8fc674
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2fd6df2f2b47d4301b1ee0fe9d627d1c061a5988
Fixed
7353633814f6e5b4899fb9ee1483709d6bb0e1cd

Affected versions

v5.*

v5.17
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.8
v6.0.9
v6.1-rc1

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2022-49774-335c9ccc",
            "signature_type": "Function",
            "target": {
                "file": "arch/x86/kvm/xen.c",
                "function": "kvm_xen_eventfd_assign"
            },
            "signature_version": "v1",
            "digest": {
                "length": 1731.0,
                "function_hash": "83237458136112850726162328776653148567"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7353633814f6e5b4899fb9ee1483709d6bb0e1cd"
        },
        {
            "id": "CVE-2022-49774-422430a2",
            "signature_type": "Line",
            "target": {
                "file": "arch/x86/kvm/xen.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "69199032310132833473170067084430280035",
                    "257512156095998685138545607260052073856",
                    "322338914238251777113384179388560931870",
                    "135908224025777280649671245771284677876",
                    "132334805578763251935511756857221630011",
                    "322242879656372605864479234939439662776",
                    "200599315741212383942203417733919243392",
                    "43846508564491393956935703131658454526",
                    "76748484704938079842944422464786437127",
                    "114108759833436250311995929228403716724",
                    "41016198791399325011193802274485477678",
                    "219255221505681201329999028809820268564",
                    "152852515699297738139210766050436884381",
                    "23959054917877474559141747697414349687",
                    "72820575266658477297111346961276315396",
                    "41118318883429934571248791937688846628",
                    "162485109498608563054763686388045155805",
                    "330952834048374270006175698836433386749"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7353633814f6e5b4899fb9ee1483709d6bb0e1cd"
        },
        {
            "id": "CVE-2022-49774-66a5f056",
            "signature_type": "Line",
            "target": {
                "file": "arch/x86/kvm/xen.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "69199032310132833473170067084430280035",
                    "257512156095998685138545607260052073856",
                    "322338914238251777113384179388560931870",
                    "135908224025777280649671245771284677876",
                    "132334805578763251935511756857221630011",
                    "322242879656372605864479234939439662776",
                    "200599315741212383942203417733919243392",
                    "43846508564491393956935703131658454526",
                    "76748484704938079842944422464786437127",
                    "114108759833436250311995929228403716724",
                    "41016198791399325011193802274485477678",
                    "219255221505681201329999028809820268564",
                    "152852515699297738139210766050436884381",
                    "23959054917877474559141747697414349687",
                    "72820575266658477297111346961276315396",
                    "41118318883429934571248791937688846628",
                    "162485109498608563054763686388045155805",
                    "330952834048374270006175698836433386749"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d76f46f47dfde220712d1420ee5dbc546c8fc674"
        },
        {
            "id": "CVE-2022-49774-b929e09d",
            "signature_type": "Function",
            "target": {
                "file": "arch/x86/kvm/xen.c",
                "function": "kvm_xen_eventfd_assign"
            },
            "signature_version": "v1",
            "digest": {
                "length": 1731.0,
                "function_hash": "83237458136112850726162328776653148567"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d76f46f47dfde220712d1420ee5dbc546c8fc674"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
6.0.10