CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
41.2%
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a
stale TLB because an rmap lock is not held during a PUD move.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 20.04 | noarch | linux | < 5.4.0-132.148 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < 5.4.0-1089.97 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws-5.4 | < 5.4.0-1089.97~18.04.1 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure | < 5.4.0-1095.101 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-azure-5.4 | < 5.4.0-1095.101~18.04.1 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-azure-fde | < 5.4.0-1095.101 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-bluefield | < 5.4.0-1050.56 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-gcp | < 5.4.0-1093.102 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-gcp-5.4 | < 5.4.0-1093.102~18.04.1 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-gke | < 5.4.0-1087.94 | UNKNOWN |
packetstormsecurity.com/files/168466/Linux-Stable-5.4-5.10-Use-After-Free-Race-Condition.html
bugs.chromium.org/p/project-zero/issues/detail?id=2347
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2
git.kernel.org/linus/97113eb39fa7972722ff490b947d8af023e1f6a2 (5.14-rc1)
launchpad.net/bugs/cve/CVE-2022-41222
nvd.nist.gov/vuln/detail/CVE-2022-41222
security-tracker.debian.org/tracker/CVE-2022-41222
ubuntu.com/security/notices/USN-5728-1
ubuntu.com/security/notices/USN-5728-2
ubuntu.com/security/notices/USN-5728-3
www.cve.org/CVERecord?id=CVE-2022-41222