CVE-2022-49229

ptp: unregister virtual clocks when unregistering physical clock.

Description

In the Linux kernel, the following vulnerability has been resolved: ptp: unregister virtual clocks when unregistering physical clock. When unregistering a physical clock which has some virtual clocks, unregister the virtual clocks with it. This fixes the following oops, which can be triggered by unloading a driver providing a PTP clock when it has enabled virtual clocks: BUG: unable to handle page fault for address: ffffffffc04fc4d8 Oops: 0000 [#1] PREEMPT SMP NOPTI RIP: 0010:ptp_vclock_read+0x31/0xb0 Call Trace: timecounter_read+0xf/0x50 ptp_vclock_refresh+0x2c/0x50 ? ptp_clock_release+0x40/0x40 ptp_aux_kworker+0x17/0x30 kthread_worker_fn+0x9b/0x240 ? kthread_should_park+0x30/0x30 kthread+0xe2/0x110 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30

N/A

CVSS

Severity:

EPSS 0.03%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/b2dea2a696d09163da4cd33cb598ce1f73e86597
https://git.kernel.org/stable/c/9c796a57cbb5daf124a665689f0b2bc9262e0ced
https://git.kernel.org/stable/c/c49eafe6249f844c26f9866886cc6719d81762df
https://git.kernel.org/stable/c/bfcbb76b0f595ea9ede9f7a218086fef85242f10

Frequently Asked Questions

What is the severity of CVE-2022-49229?: CVE-2022-49229 has not yet been assigned a CVSS score.
How to fix CVE-2022-49229?: To fix CVE-2022-49229, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-49229 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-49229 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-49229?: CVE-2022-49229 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.