CVE-2022-49339

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, related to the seg6 hmac init() function, which is annotated with init and exported using EXPORT SYMBOL. This combination is problematic because the .init.text section is freed after initialization, and modules cannot use symbols annotated with init. Access to a freed symbol may result in a kernel panic. The issue was previously undetected by modpost due to a decade-long bug, but a recent fix to modpost revealed the problem.

Recommendations Remove EXPORT SYMBOL from the seg6 hmac init() function, as the caller and callee belong to the same module, ipv6.ko. At the moment, there is no information about a newer version that contains a fix for this vulnerability.