CVE-2022-49076
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49076
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49076.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49076
- Related
- Published
- 2025-02-26T07:00:44Z
- Modified
- 2025-03-24T18:55:46.154622Z
- Downstream
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: Fix use-after-free bug for mm struct
Under certain conditions, such as MPIAbort, the hfi1 cleanup code may represent the last reference held on the task mm. hfi1mmurbunregister() then drops the last reference and the mm is freed before the final use in hfi1releaseuserpages(). A new task may allocate the mm structure while it is still being used, resulting in problems. One manifestation is corruption of the mmapsem counter leading to a hang in down_write(). Another is corruption of an mm struct that is in use by another task.
- References
-
- https://git.kernel.org/stable/c/0b7186d657ee55e2cdefae498f07d5c1961e8023
- https://git.kernel.org/stable/c/2bbac98d0930e8161b1957dc0ec99de39ade1b3c
- https://git.kernel.org/stable/c/5a9a1b24ddb510715f8f621263938186579a965c
- https://git.kernel.org/stable/c/5f54364ff6cfcd14cddf5441c4a490bb28dd69f7
- https://git.kernel.org/stable/c/9ca11bd8222a612de0d2f54d050bfcf61ae2883f
- https://security-tracker.debian.org/tracker/CVE-2022-49076
Affected packages
Debian:11 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.10.113-1
Debian:12 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source