Kernel Panic Risk in Linux Packages Due to EFI Page Table Sync Issue
Summary
CVE-2022-49004: In the Linux kernel, the following vulnerability has been resolved: riscv: Sync efi page table's kernel mappings before switching The EFI page table is initially created as a copy of the kernel page table. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management, process control, and system resource allocation. It is widely used across various distributions, including Debian. The kernel's functionality is critical for system stability and performance. This vulnerability specifically affects the EFI (Extensible Firmware Interface) page table synchronization, which is crucial for managing memory and stack allocation in systems with VMAP_STACK enabled.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the synchronization of the EFI page table's kernel mappings. When the kernel stack is allocated in a new Page Global Directory (PGD) that was not present during the EFI page table creation, accessing the vmalloc kernel stack can lead to a trap, resulting in a kernel panic. This issue arises when the EFI page table does not reflect the current state of the kernel's memory mappings, potentially causing system crashes and instability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workaround is provided for this vulnerability. The best course of action is to apply the available patch by updating the Linux package as mentioned above.
Conclusion
CVE-2022-49004 presents a significant risk to systems running affected versions of the Linux kernel, particularly in Debian distributions. It is crucial to update to the patched version to maintain system stability and prevent kernel panics. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49004 is a vulnerability in the Linux kernel related to the synchronization of EFI page table mappings, which can lead to kernel panics.
The vulnerability affects Linux packages in Debian 11, 12, and 13, particularly those versions prior to 6.0.12-1.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Failure to address this vulnerability may result in system instability, including unexpected crashes and kernel panics when accessing the vmalloc kernel stack.
While no specific workaround is provided, the best mitigation is to ensure your system is updated as soon as possible to avoid potential crashes.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
