5.5

CVE-2022-49100: virtio_console: eliminate anonymous module_init & module_exit

Analyzed
AliasesUBUNTU-CVE-2022-49100DEBIAN-CVE-2022-49100
Published 26-02-2025Last modified 11-05-2026

Vulnerability summary

CVE-2022-49100 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 18% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.26%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 7
SUSE-SU-2025:1027-1SUSE-SU-2025:1176-1SUSE-SU-2025:1183-1SUSE-SU-2025:1194-1SUSE-SU-2025:1241-1SUSE-SU-2025:1263-1

Timeline

  1. 26-02-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: virtio_console: eliminate anonymous module_init & module_exit Eliminate anonymous module_init() and module_exit(), which can lead to confusion or ambiguity when reading System.map, crashes/oops/bugs, or an initcall_debug log. Give each of these init and exit functions unique driver-specific names to eliminate the anonymous names. Example 1: (System.map) ffffffff832fc78c t init ffffffff832fc79e t init ffffffff832fc8f8 t init Example 2: (initcall_debug log) calling init+0x0/0x12 @ 1 initcall init+0x0/0x12 returned 0 after 15 usecs calling init+0x0/0x60 @ 1 initcall init+0x0/0x60 returned 0 after 2 usecs calling init+0x0/0x9a @ 1 initcall init+0x0/0x9a returned 0 after 74 usecs

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.26%

Chance of exploitation in the next 30 days

Percentile

18%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.26% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu106 products
  • linuxAll versions (No fix recorded) | < 4.15.0-189.200 | < 5.4.0-117.132 | < 5.15.0-37.39
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 4.15.0-1137.148 | < 5.4.0-1078.84 | < 5.15.0-1011.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < 93e3d88321d2274fa4e26b006e19cc10fec331c2 | ≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < 7deaddb704713608e0ae559e27185581b9af71a0 | ≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < 0f3d824bd70a1303464d5e93ee3e7afe7832fe89 | ≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < 3504b0a177208eda85bf472bbf7c9aa77d2b8343 | ≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < c69b442125bf009fce26e15aa5616caf8a3673c3 | ≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < 44c2d5fbe7b2bd1f8cb114d608a591a73a5d4ae6 | ≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < 3fd5dee7404ce40c79cba468bb2510115639d975 | ≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < 71612aee09ecea3475f8751dc841d75a011b1fd0 | ≥ 31610434bc3523c0b01a10917a1185096a03c4c8, < fefb8a2a941338d871e2d83fbd65fbfa068857bd | 2.6.24
  • linux_kernel< 4.9.311 | ≥ 4.10, < 4.14.276 | ≥ 4.15, < 4.19.238 | ≥ 4.20, < 5.4.189 | ≥ 5.5, < 5.10.111 | ≥ 5.11, < 5.15.34 | ≥ 5.16, < 5.16.20 | ≥ 5.17, < 5.17.3
Debian1 product
  • linux< 5.17.3-1

3 vendors · 109 products

References

13 links
Show all 13 references