Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2022-49847
CVE-2022-49847:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2022-49847 is a vulnerability in the Linux kernel affecting the TI AM65 CPSW network driver. The issue was discovered and disclosed on May 1, 2025, and involves a segmentation fault that occurs during module unload operations when specific conditions are met (NVD, Wiz).
Technical details
The vulnerability occurs due to improper timing of cleanup operations in the phylink component. Specifically, when am65cpswnussphylinkcleanup() is called before am65cpswnusscleanupndev(), it causes phylink to become invalid. This leads to a kernel paging request failure at virtual address 00040008000005f4, resulting in a memory abort with ESR = 0x0000000096000004 (NVD).
Impact
When triggered, this vulnerability results in a kernel segmentation fault, which can cause system instability or crashes during module unload operations when the first slave link is up (Wiz).
Mitigation and workarounds
The vulnerability has been resolved by modifying the cleanup sequence. The fix involves moving the am65cpswnussphylinkcleanup() call to execute after am65cpswnusscleanupndev(), ensuring phylink remains valid during the cleanup process (NVD).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management