high
7
CWE
416 362
Advisory Published
CVE Published
Updated

CVE-2022-41222: Use After Free

First published: Wed Jul 07 2021(Updated: )

A flaw use after free found in Linux Kernel mm/mremap memory address space accounting source code. If race condition happens between rmap walk and mremap, this can result in stale TLB entries. Reference: <a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2">https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2</a>

Credit: cve@mitre.org cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
redhat/kernel-rt<0:4.18.0-425.13.1.rt7.223.el8_7
0:4.18.0-425.13.1.rt7.223.el8_7
redhat/kernel<0:4.18.0-425.13.1.el8_7
0:4.18.0-425.13.1.el8_7
redhat/kernel<0:4.18.0-372.46.1.el8_6
0:4.18.0-372.46.1.el8_6
Android
Linux Kernel>=5.0<5.4.211
Linux Kernel>=5.5<5.10.137
Linux Kernel>=5.11<5.12.18
Linux Kernel>=5.13<5.13.3
Debian Linux=10.0
NetApp HCI Baseboard Management Controller=h300s
NetApp HCI Baseboard Management Controller=h410c
NetApp HCI Baseboard Management Controller=h410s
NetApp HCI Baseboard Management Controller=h500s
NetApp HCI Baseboard Management Controller=h700s
Ubuntu=18.04
Ubuntu=20.04
Ubuntu=22.04
debian/linux
5.10.223-1
5.10.234-1
6.1.129-1
6.1.128-1
6.12.20-1
6.12.21-1

Remedy

http://packetstormsecurity.com/files/171005/Kernel-Live-Patch-Security-Notice-LNS-0091-1.html

Remedy

https://bugs.chromium.org/p/project-zero/issues/detail?id=2347

Remedy

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=97113eb39fa7972722ff490b947d8af023e1f6a2

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is the severity of CVE-2022-41222?

    CVE-2022-41222 has been assigned a medium severity rating due to its potential impact on memory management in the Linux Kernel.

  • How do I fix CVE-2022-41222?

    To fix CVE-2022-41222, update the Linux Kernel to the recommended versions or later: 0:4.18.0-425.13.1.rt7.223.el8_7, 0:4.18.0-425.13.1.el8_7, or other specified versions.

  • Which Linux distributions are affected by CVE-2022-41222?

    CVE-2022-41222 affects various distributions, including certain versions of Red Hat, Ubuntu, and Debian based on the Linux Kernel.

  • What types of systems are vulnerable due to CVE-2022-41222?

    Systems running the affected versions of the Linux Kernel, including servers and desktop environments, are at risk from CVE-2022-41222.

  • Are there any workarounds for CVE-2022-41222?

    There are no recommended workarounds for CVE-2022-41222; the best action is to apply the available patches.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203