PT-2025-8005 · Linux+2 · Linux Kernel+2

Published 2022-04-08 · Updated 2025-05-22 · CVE-2022-49077

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A resolved issue in the Linux kernel involves the mremap() syscall. When this syscall is called with old size=0 and ends up in move page tables(), it unnecessarily calls invalidate range start() and invalidate range end() with an empty range. This causes a warning in KVM's mmu notifier, as empty ranges have been associated with off-by-one bugs in the past. The issue is fixed with an early return from move page tables().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-193

Related Identifiers

BDU:2025-06051

CVE-2022-49077

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49077.json · Exploit
• https://git.kernel.org/stable/c/c19d8de4e682ec4b0ea2b04a832cd8cc0be3bb31 · Patch
• https://git.kernel.org/stable/c/eeaf28e2a0128147d687237e59d5407ee1b14693 · Patch
• https://git.kernel.org/stable/c/e2c328c2a8f9de8b761bd4025b66c63120c55761 · Patch
• https://bdu.fstec.ru/vul/2025-06051 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49077 · Vendor Advisory
• https://git.kernel.org/stable/c/a05540f3903bd8295e8c4cd90dd3d416239a115b · Patch
• https://git.kernel.org/stable/c/7d659cb1763ff17d1c6ee082fa6feb4267c7a30b · Patch
• https://osv.dev/vulnerability/CVE-2022-49077 · Vendor Advisory
• https://git.kernel.org/stable/c/2358aa84ef6dafcf544a557caaa6b91afb4a0bd2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49077 · Security Note
• https://git.kernel.org/stable/c/a04cb99c5d4668fe3f5c0e5b6da1cecd34c3f219 · Patch
• https://git.kernel.org/stable/c/01e67e04c28170c47700c2c226d732bbfedb1ad0 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49077 · Vendor Advisory
• https://git.kernel.org/stable/c/04bc13dae4a27b8d030843c85ae452bb2f1d9c1f · Patch