What’s Vulnerable › Vulnerabilities

CVE-2022-49074: irqchip/gic-v3: Fix GICR_CTLR.RWP polling

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-26 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix GICR_CTLR.RWP polling It turns out that our polling of RWP is totally wrong when checking for it in the redistributors, as we test the *distributor* bit index, whereas it is a different bit number in the RDs... Oopsie boo. This is embarassing. Not only because it is wrong, but also because it took *8 years* to notice the blunder... Just fix the damn thing.

Affected products

• Linux kernel: from 3.17 before 4.19.238; from 4.20 before 5.4.189; from 5.5 before 5.10.111; from 5.11 before 5.15.34; from 5.16 before 5.16.20; from 5.17 before 5.17.3 — fixed in 4.19.238, 5.10.111, 5.15.34, 5.16.20, 5.17.3, 5.4.189

How to fix

Upgrade to a fixed version: Linux kernel 4.19.238, 5.10.111, 5.15.34, 5.16.20. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0df6664531a12cdd8fc873f0cac0dcb40243d3e9
• https://git.kernel.org/stable/c/3c07cc242baf83f0bddbbd9d7945d0bee56d8b57
• https://git.kernel.org/stable/c/60e1eb4811f53f5f60c788297d978515e7a2637a
• https://git.kernel.org/stable/c/6fef3e3179e6ed8fecdd004ede541674ffa7749d
• https://git.kernel.org/stable/c/7218a789abb3e033f5f3a85636ca50d9ae7b0fc9
• https://git.kernel.org/stable/c/c7daf1b4ad809692d5c26f33c02ed8a031066548
• https://git.kernel.org/stable/c/ff24114bb08d8b90edf2aff0a4fd0689523e6c17

Get alerted when CVE-2022-49074 or the next vulnerability affects your stack