PT-2025-18560 · Linux · Linux Kernel

Published 2025-05-01 · Updated 2025-05-02 · CVE-2022-49843

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the drm/amdkfd module. The issue arises when the migrate vma setup function is called, resulting in a warning because the mmap lock of another process is not held. The solution involves using the current vmf->vma->vm mm instead, as the caller already holds the current mmap lock inside the CPU page fault handler. The warning is triggered by the find vma function, and the call trace includes functions such as walk page range, migrate vma setup, and do user addr fault.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-49843

Affected Products

Linux Kernel

References · 11

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49843 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49843 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-49843 · Security Note
• https://osv.dev/vulnerability/CVE-2022-49843 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-49843 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49843 · Vendor Advisory
• https://git.kernel.org/linus/3a876060892ba52dd67d197c78b955e62657d906 · Note
• https://twitter.com/CVEnew/status/1917950879489310840 · Twitter Post
• https://git.kernel.org/stable/c/1dea25e25acd990d7657940ffcab8354c28fa292 · Note
• https://git.kernel.org/stable/c/128e284c6cccf5875261569fa3bb07558870c17f · Note
• https://git.kernel.org/stable/c/3a876060892ba52dd67d197c78b955e62657d906 · Note