CVE-2022-49029·Kernel vulnerability
In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning as follows: drivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn: '&data->list' not removed from list If ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will be freed, but data->list will not be removed from driver_data.bmc_data, then list traversal may cause UAF. Fix by removeing it from driver_data.bmc_data before free().
- Severity
- high
- Software
- Kernel
- Fixed in
- 6.0.12
- Published
- 2024-10-21
Affected versions
From: 5.16
Until: 6.0.12
Fixed in: 6.0.12
How to fix this CVE
Update your Linux kernel to version 6.0.12 or later to resolve a use-after-free vulnerability in the IBM PowerPC Exposed-Registers (IBMPEX) hardware monitoring driver. This flaw could lead to kernel crashes or potential privilege escalation if the IBMPEX registration process fails during sensor enumeration. Apply kernel updates through your distribution's package manager and reboot to activate the patched version.
sudo dnf update kernel && sudo rebootDefensia detects this vulnerability
How to check if you are affected
- Step 1: Check your current kernel version with: uname -r — compare against the affected range (5.16 to 6.0.11)
- Step 2: Verify if IBMPEX driver is loaded by running: lsmod | grep ibmpex — if no output, this driver is not active on your system
- Step 3: Search system logs for IBMPEX-related errors with: sudo dmesg | grep -i ibmpex or sudo journalctl -u kernel | grep -i ibmpex — look for registration failures or UAF warnings
- Step 4: After patching to 6.0.12 or later, confirm with: uname -r — ensure the new kernel version is running
FAQ
What is CVE-2022-49029?
CVE-2022-49029 is a use-after-free vulnerability in the Linux kernel's IBMPEX hardware monitoring driver where a freed data structure remains referenced in a global list, potentially causing kernel panics or privilege escalation if sensor registration fails.
Is CVE-2022-49029 being actively exploited?
No, CVE-2022-49029 is not listed on the CISA KEV catalog and has no public exploits available, though the vulnerability is still critical and should be patched promptly.
What versions of Kernel are affected by CVE-2022-49029?
Linux kernel versions 5.16 through 6.0.11 are vulnerable; kernel 6.0.12 and later versions contain the fix.
How do I check if my server is vulnerable to CVE-2022-49029?
Run uname -r to display your kernel version; if the output falls between 5.16 and 6.0.11, your system is vulnerable (affected systems with IBMPEX loaded are at highest risk).
Does Defensia detect CVE-2022-49029?
Yes — Defensia's CVE advisory scanner compares installed package versions against the NVD database. If the Linux kernel is installed on a monitored server, CVE-2022-49029 will appear in your dashboard with remediation steps.
Related Kernel CVEs
References
- https://git.kernel.org/stable/c/24b9633f7db7f4809be7053df1d2e117e7c2de10
- https://git.kernel.org/stable/c/45f6e81863747c0d7bc6a95ec51129900e71467a
- https://git.kernel.org/stable/c/798198273bf86673b970b51acdb35e57f42b3fcb
- https://git.kernel.org/stable/c/7b2b67fe1339389e0bf3c37c7a677a004ac0e4e3
- https://git.kernel.org/stable/c/90907cd4d11351ff76c9a447bcb5db0e264c47cd
Track CVEs across your fleet automatically
Defensia scans your Linux servers and tells you exactly which ones are running vulnerable versions — including CVE-2022-49029. Free for 1 server.
Get started free