7
CVE-2022-41222
- EPSS 0.01%
- Published 21.09.2022 08:15:09
- Last modified 28.05.2025 16:15:28
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
Data is provided by the National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.0 < 5.4.211
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.137
Linux ≫ Linux Kernel Version >= 5.11 < 5.12.18
Linux ≫ Linux Kernel Version >= 5.13 < 5.13.3
Debian ≫ Debian Linux Version10.0
Netapp ≫ Hci Baseboard Management Controller Versionh300s
Netapp ≫ Hci Baseboard Management Controller Versionh410c
Netapp ≫ Hci Baseboard Management Controller Versionh410s
Netapp ≫ Hci Baseboard Management Controller Versionh500s
Netapp ≫ Hci Baseboard Management Controller Versionh700s
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version20.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version22.04 SwEditionlts
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.01% | 0.017 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7 | 1 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7 | 1 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-416 Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.