CVE-2022-49074

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-02-26 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix GICR_CTLR.RWP polling It turns out that our polling of RWP is totally wrong when checking for it in the redistributors, as we test the *distributor* bit index, whereas it is a different bit number in the RDs... Oopsie boo. This is embarassing. Not only because it is wrong, but also because it took *8 years* to notice the blunder... Just fix the damn thing.

Affected Software (10)

VendorProductVersion
Linux Linux 021f653791ad17e03f98aaa7fb933816ae16f161 < c7daf1b4ad809692d5c26f33c02ed8a031066548
Linux Linux 021f653791ad17e03f98aaa7fb933816ae16f161 < 3c07cc242baf83f0bddbbd9d7945d0bee56d8b57
Linux Linux 021f653791ad17e03f98aaa7fb933816ae16f161 < ff24114bb08d8b90edf2aff0a4fd0689523e6c17
Linux Linux 021f653791ad17e03f98aaa7fb933816ae16f161 < 7218a789abb3e033f5f3a85636ca50d9ae7b0fc9
Linux Linux 021f653791ad17e03f98aaa7fb933816ae16f161 < 60e1eb4811f53f5f60c788297d978515e7a2637a
Linux Linux 021f653791ad17e03f98aaa7fb933816ae16f161 < 6fef3e3179e6ed8fecdd004ede541674ffa7749d
Linux Linux 021f653791ad17e03f98aaa7fb933816ae16f161 < 0df6664531a12cdd8fc873f0cac0dcb40243d3e9
Linux Linux 3.17
linux linux_kernel 3.17 – 4.19.238
linux linux_kernel 5.18

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.27%
Raw Score 0.002710
Percentile 19.5%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →