CVE-2022-49054

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests

hv_panic_page might contain guest-sensitive information, do not dump it over to Hyper-V by default in isolated guests.

While at it, update some comments in hyperv_{panic,die}_event().

This vulnerability is rated as Moderate severity because it requires an unhandled kernel crash inside an isolated virtual machine to expose sensitive guest memory to the host hypervisor, limiting the blast radius to confidentiality during failure states. The issue specifically impacts confidential or isolated guest workloads running on Microsoft Hyper-V where panic reporting is enabled. Systems running on bare metal, container environments, or alternative virtualization platforms are not subject to this data leakage.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.