Security Advisory
CVE-2022-49122
5.5
MEDIUM
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
dm ioctl: prevent potential spectre v1 gadget
It appears like cmd could be a Spectre v1 gadget as it's supplied by a
user and used as an array index. Prevent the contents of kernel memory
from being leaked to userspace via speculative execution by using
array_index_nospec.
Published Date
February 26, 2025
Official Source
NIST NVD Advisory