PT-2025-8142 · Linux+4 · Linux Kernel+4
Nageswara R Sastry
·
Published
2022-01-01
·
Updated
2026-03-14
·
CVE-2022-49214
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the version containing the fix for the issue described, as the specific fixed version is not mentioned.
Description
A vulnerability in the Linux kernel has been identified, where the kernel incorrectly reports read accesses as write accesses in certain cases, specifically for SLB faults. This occurs because the Data Segment Interrupt Status Register (DSISR) is not set to a useful value for SLB faults, as specified in the ISA versions from v2.03 through v3.1. As a result, the kernel may print incorrect messages for read accesses, such as reporting a read access as a write access. The issue manifests when using certain commands, like the xmon "dump" command, and can lead to incorrect reporting of kernel data access errors.
Recommendations
For Linux kernel versions prior to the fixed version, rework the printing logic to separate the SLB fault case and only print read/write in cases where it can be determined. This involves modifying the bad page fault() function to handle SLB faults differently and not relying on the DSISR value for these cases. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Resource Release
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linux Kernel
Red Hat
Suse