Question 1

What is CVE-2022-49444?

Accepted Answer

CVE-2022-49444 is a high-severity software vulnerability (Out-of-bounds read) with a CVSS score of 7.1. In the Linux kernel, the following vulnerability has been resolved:

module: fix [e_shstrndx].sh_size=0 OOB access

It is trivial to craft a module to trigger OOB access in this line:

if (info->secstrings[strhdr->sh_size - 1] != '\0') {

Question 2

Is CVE-2022-49444 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

Question 3

What products does CVE-2022-49444 affect?

Accepted Answer

Tracked products affected include Linux Kernel. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2022-49444?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2022-49444

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information