Critical Memory Management Vulnerability in Linux Kernel - CVE-2022-49778
Summary
CVE-2022-49778: In the Linux kernel, the following vulnerability has been resolved: arm64/mm: fix incorrect file_map_count for non-leaf pmd/pud The page table check trigger BUG_ON() unexpectedly when collapse hugepage: ------------[ cut... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware resources and providing essential services for software applications. It is known for its stability, performance, and security features. However, vulnerabilities can arise, such as CVE-2022-49778, which affects the memory management subsystem, specifically in the handling of page tables.
Vulnerability Detail
CVE-2022-49778 is a vulnerability in the Linux kernel that arises from an incorrect handling of file_map_count during the collapse of huge pages. The issue occurs when the page table check triggers a BUG_ON() unexpectedly due to the pmd_user_accessible_page() function not verifying if a pmd is a leaf. This can lead to a system crash or unexpected behavior, posing a significant risk to system stability and security.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate risks.
Conclusion
CVE-2022-49778 is a critical vulnerability in the Linux kernel that affects memory management. It is essential to update to the patched version to ensure system stability and security. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49778 is a vulnerability in the Linux kernel related to incorrect memory management during the collapse of huge pages.
This vulnerability can lead to system crashes or unexpected behavior, compromising system stability and security.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, a patch is available in version 6.0.10-1 of the Linux package. It is recommended to update to this version or later.
While there are no specific workarounds, it is crucial to prioritize applying the patch as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
