PT-2022-1378 · Linux+8 · Linux Kernel+8
Jann Horn
·
Published
2022-08-31
·
Updated
2026-04-01
·
CVE-2022-42703
CVSS v3.1
5.5
Medium
| AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
kernel versions prior to 5.19.7
kernel-image-centos version 5.14.0.192-alt1.el9
kernel-image-rpi-un version 6.0.2-alt1
Description
The Linux kernel contains a use-after-free vulnerability in the mm/rmap.c file. This flaw is related to a double reuse of a leaf anon vma, potentially leading to a system crash or, in some cases, local privilege escalation. The vulnerability exists in multiple functions within rmap.c and does not require user interaction to be exploited. Exploitation involves memory corruption and can allow an attacker to gain control of the system.
Recommendations
Update the kernel to version 5.19.7 or later.
Update kernel-image-centos to version 5.14.0.192-alt1.el9.
Update kernel-image-rpi-un to version 6.0.2-alt1.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu