CVE-2022-49726

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the hyper-v clocksource. The issue arises from the combination of EXPORT SYMBOL and init, which can lead to kernel panic when modules attempt to use symbols annotated init after the .init.text section is freed. The problem was previously undetected by modpost due to a decade-long bug, but after fixing modpost, the issue was identified in linux-next builds.

Recommendations Remove EXPORT SYMBOL from the hv init clocksource() function to prevent the vulnerability, as the only in-tree call-site is never compiled as modular.