CVE-2022-49345

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the xfrm4 protocol init() function, which was annotated with init and exported using EXPORT SYMBOL. This combination is problematic because the .init.text section is freed after initialization, and modules cannot use symbols annotated with init, potentially leading to a kernel panic. The issue was detected after a fix was applied to modpost, a tool that had been broken for a decade.

Recommendations Remove EXPORT SYMBOL from the xfrm4 protocol init() function to prevent the vulnerability, as the only in-tree call site is never compiled as modular.