PT-2024-8221 · Linux+2 · Linux Kernel+2

Published

2022-08-31

·

Updated

2025-01-24

·

CVE-2022-48700

CVSS v2.0

1.7

Low

VectorAV:L/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue is related to a reference count leak on the zero page in the Linux kernel's vfio/type1 component. This leak occurs because the page is handled as an invalid or reserved page after the reference is incremented via pin user pages remote(), and it is not accounted against the user or unpinned by put pfn(). Introducing special zero page handling in put pfn() could resolve the leak, but without accounting for the zero page, a single user could still create enough mappings to generate a reference count overflow. The zero page is always resident, so there is no reason to keep it pinned. A loop has been added to walk pages returned from pin user pages remote() and unpin any zero pages.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-09764
CVE-2022-48700
OPENSUSE-SU-2024_1644-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:1644-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2189-1
SUSE-SU-2025:0231-1

Affected Products

Linux Kernel
Red Os
Suse