Critical Vulnerability in Linux Kernel: Page Mapping Corruption in Hugetlb
Summary
CVE-2022-49991: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte In MCOPY_ATOMIC_CONTINUE case with a non-shared VMA, pages in the page cache are... Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It supports a wide range of functionalities, including process management, memory management, and device drivers. This vulnerability specifically affects the hugetlb (huge pages) functionality, which is used to manage large memory pages for improved performance in certain applications. The issue arises from improper handling of page mappings, leading to potential system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the handling of hugetlb memory management. Specifically, in the MCOPY_ATOMIC_CONTINUE case with a non-shared Virtual Memory Area (VMA), pages in the page cache are incorrectly installed in the page table entries (PTEs). This mismanagement causes the function hugepage_add_new_anon_rmap to be called erroneously for these pages, which are not shared. As a result, the page->mapping structure used by the page cache code can become corrupted, potentially leading to system crashes or data loss.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
The vulnerability CVE-2022-49991 in the Linux kernel poses significant risks due to potential page mapping corruption. Users are strongly advised to update their kernel to the patched version 6.0.2-1 to mitigate these risks. Monitoring tools like Vulert can assist in identifying vulnerabilities in your applications, ensuring better security management.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49991 is a vulnerability in the Linux kernel related to the hugetlb memory management system, which can lead to page mapping corruption.
This vulnerability can cause system instability, crashes, or data loss due to corrupted page mappings in the kernel.
If you are using Debian 12 or 13 with a kernel version prior to 6.0.2-1, your system is affected by this vulnerability.
While no specific workarounds are available, it is recommended to prioritize updating your kernel to the fixed version as soon as possible.
You can use tools like Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. You can check for vulnerabilities in your application using the Vulert playground without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
