CVE-2022-50285: mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
In the Linux kernel, the following vulnerability has been resolved:
mm,hugetlb: take hugetlblock before decrementing h->resvhugepages
The h->hugepages counters are protected by the hugetlblock, but allochugepage has a corner case where it can decrement the counter outside of the lock.
This could lead to a corrupted value of h->resvhugepages, which we have observed on our systems.
Take the hugetlblock before decrementing h->resvhugepages to avoid a potential race.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50285?
CVE-2022-50285 has a severity rating that may vary based on the affected Linux kernel version.
How do I fix CVE-2022-50285?
To remediate CVE-2022-50285, update your Linux kernel to a version that contains the patch addressing this vulnerability.
What versions of Linux kernel are affected by CVE-2022-50285?
CVE-2022-50285 affects various Linux kernel versions between 4.4 and 6.1, particularly those versions that do not include the fixes.
What impact does CVE-2022-50285 have on system security?
Exploiting CVE-2022-50285 could lead to potential memory corruption issues, affecting system stability and security.
Is CVE-2022-50285 remotely exploitable?
CVE-2022-50285 requires local access to the system to exploit, thus it is not categorized as remotely exploitable.