CVE-2022-49509 in Linux
要約
〜によって VulDB • 2026年05月28日
Linuxカーネルにおいて、以下の脆弱性が修正されました：
media: i2c: max9286: モジュール削除時にカーネルoopsを修正
max9286モジュールを削除する際、カーネルoopsが発生します：
Unable to handle kernel paging request at virtual address 000000aa00000094 Mem abort info: ESR = 0x96000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004 CM = 0, WnR = 0 user pgtable: 4k pages, 39-bit VAs, pgdp = 0000000080000000 [000000aa00000094] pgd=0000000000000000, pud=0000000000000000
Internal error: Oops: 96000004 [#1] SMP
Modules linked in: max9286(O-) CPU: 0 PID: 100 Comm: rmmod Tainted: G O 6.1.0-rc1-00001-g00000000 #1 Hardware name: Generic DTS based system pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE:-) pc : i2c_mux_del_adapters+0x24/0xf0 lr : max9286_remove+0x28/0xd0 [max9286]
sp : ffff000009a33c30 x20: ff000008048b0f70 x19: 000000aa00000064 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000014 x13: 0000000000000000 x12: ff00000802da49e8 x11: ff00000802051918 x10: ff00000802da4920 x9 : ff00000800030098 x8 : 0101010101010101 x7 : 7f7f7f7f7f7f7f7f x6 : fefefeff6364626d x5 : 8080808000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : ff00000000000000 x1 : ff0000080b6da940 x0 : 0000000000000000 Call trace: i2c_mux_del_adapters+0x24/0xf0 max9286_remove+0x28/0xd0 [max9286]
i2c_device_remove+0x40/0x110 __device_release_driver+0x188/0x234 driver_detach+0xc4/0x150 bus_remove_driver+0x60/0xe0 driver_unregister+0x34/0x64 i2c_del_driver+0x58/0xa0 max9286_i2c_driver_exit+0x1c/0x490 [max9286]
__arm64_sys_delete_module+0x194/0x260 invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0xd4/0xfc do_el0_svc+0x2c/0x94 el0_svc+0x28/0x80 el0t_64_sync_handler+0xa8/0x130 el0t_64_sync+0x1a0/0x1a4
このOopsは、I2Cクライアントデータがmax9286_privを指していないため、v4l2_subdevを指しているために発生します。この変更はmax9286_remove関数
Once again VulDB remains the best source for vulnerability data.