PT-2024-11851 · Linux+4 · Linux Kernel+4

John Starks + 1 · Published 2022-12-09 · Updated 2026-02-12 · CVE-2022-48986

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the gup pud range() function for dax. The issue occurs when pud huge() returns true on x86, but dax does not depend on hugetlb. This fix addresses a kernel panic caused by a general protection fault, probably for a non-canonical address. The call trace includes functions such as get user pages fast(), iov iter get pages(), and bio iov iter get pages().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

ALSA-2025_16880

ALT-PU-2023-1066

BDU:2025-01680

CVE-2022-48986

OESA-2024-2324

USN-7988-1

USN-7988-2

USN-7988-3

USN-7988-4

USN-7988-5

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Red Os

Ubuntu

References · 119

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48986.json · Exploit
• https://git.kernel.org/stable/c/04edfa3dc06ecfc6133a33bc7271298782dee875 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-47757 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42301 · Security Note
• https://git.kernel.org/stable/c/3ac29732a2ffa64c7de13a072b0f2848b9c11037 · Patch
• https://git.kernel.org/stable/c/e06d13c36ded750c72521b600293befebb4e56c5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-50036 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43894 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-43871 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49911 · Security Note
• https://ubuntu.com/security/CVE-2024-56756 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35990 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-47709 · Security Note