CVE-2022-49350
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
net: mdio: unexport __init-annotated mdio_bus_init()
In the Linux kernel, the following vulnerability has been resolved: net: mdio: unexport __init-annotated mdio_bus_init() EXPORT_SYMBOL and __init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated __init. The access to a freed symbol may end up with kernel panic. modpost used to detect it, but it has been broken for a decade. Recently, I fixed modpost so it started to warn it again, then this showed up in linux-next builds. There are two ways to fix it: - Remove __init - Remove EXPORT_SYMBOL I chose the latter for this case because the only in-tree call-site, drivers/net/phy/phy_device.c is never compiled as modular. (CONFIG_PHYLIB is boolean)
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 90eff9096c01ba90cdae504a6b95ee87fe2556a3 | affected | git | ab64ec2c75683f30ccde9eaaf0761002f901aa12 | Unavailable | None listed |
| 90eff9096c01ba90cdae504a6b95ee87fe2556a3 | affected | git | 5534bcd7c40299862237c4a8fd9c5031b3db1538 | Unavailable | None listed |
| 90eff9096c01ba90cdae504a6b95ee87fe2556a3 | affected | git | 6a90a44d53428a3bf01bd80df9ba78b19959270c | Unavailable | None listed |
| 90eff9096c01ba90cdae504a6b95ee87fe2556a3 | affected | git | 7759c3222815b945a94b212bc0c6cdec475cfec2 | Unavailable | None listed |
| 90eff9096c01ba90cdae504a6b95ee87fe2556a3 | affected | git | 59fa94cddf9eef8d8dae587373eed8b8f4eb11d7 | Unavailable | None listed |
| 90eff9096c01ba90cdae504a6b95ee87fe2556a3 | affected | git | f5c68137f1191ba3fcf6260ec71b30be2e2bf4c3 | Unavailable | None listed |
| 90eff9096c01ba90cdae504a6b95ee87fe2556a3 | affected | git | f2f0f8c18b60ca64ff50892ed899cf1c77864755 | Unavailable | None listed |
| 90eff9096c01ba90cdae504a6b95ee87fe2556a3 | affected | git | 35b42dce619701f1300fb8498dae82c9bb1f0263 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.12 | Unavailable | None listed |
| 4.14.283 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.247 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.198 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.122 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.47 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 5.17.15 | unaffected | semver | Unavailable | 5.17.* | None listed |
| 5.18.4 | unaffected | semver | Unavailable | 5.18.* | None listed |
| 5.19 | unaffected | original_commit_for_fix | Unavailable | * | None listed |