cbcvebase.
CVE-2022-49080
published 2025-02-26

CVE-2022-49080: In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpol_new leak in shared_policy_replace If mpol_new is allocated but not…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.31%
22.9th percentile
In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpol_new leak in shared_policy_replace If mpol_new is allocated but not used in restart loop, mpol_new will be freed via mpol_put before returning to the caller. But refcnt is not initialized yet, so mpol_put could not do the right things and might leak the unused mpol_new. This would happen if mempolicy was updated on the shared shmem file while the sp->lock has been dropped during the memory allocation. This issue could be triggered easily with the below code snippet if there are many processes doing the below work at the same time: shmid = shmget((key_t)5566, 1024 * PAGE_SIZE, 0666|IPC_CREAT); shm = shmat(shmid, 0, 0); loop many times { mbind(shm, 1024 * PAGE_SIZE, MPOL_LOCAL, mask, maxnode, 0); mbind(shm + 128 * PAGE_SIZE, 128 * PAGE_SIZE, MPOL_DEFAULT, mask, maxnode, 0); }

Affected

25 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.17.3-1 (bookworm)linux 5.17.3-1 (bookworm)
linuxlinux——
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < 8510c2346d9e47a72b7f018a36ef0c39483e53d68510c2346d9e47a72b7f018a36ef0c39483e53d6
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < 5e16dc5378abd749a836daa9ee4ab2c8d26689995e16dc5378abd749a836daa9ee4ab2c8d2668999
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < 39a32f3c06f6d68a530bf9612afa19f50f12e93d39a32f3c06f6d68a530bf9612afa19f50f12e93d
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < 25f506273b6ae806fd46bfcb6fdaa5b9ec81a05b25f506273b6ae806fd46bfcb6fdaa5b9ec81a05b
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < f7e183b0a7136b6dc9c7b9b2a85a608a8feba894f7e183b0a7136b6dc9c7b9b2a85a608a8feba894
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < 198932a14aeb19a15cf19e51e151d023bc4cd648198932a14aeb19a15cf19e51e151d023bc4cd648
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < 6e00309ac716fa8225f0cbde2cd9c24f0e74ee216e00309ac716fa8225f0cbde2cd9c24f0e74ee21
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < fe39ac59dbbf893b73b24e3184161d0bd06d6651fe39ac59dbbf893b73b24e3184161d0bd06d6651
linuxlinux>= 42288fe366c4f1ce7522bc9f27d0bc2a81c55264 < 4ad099559b00ac01c3726e5c95dc3108ef47d03e4ad099559b00ac01c3726e5c95dc3108ef47d03e
linuxlinux_kernel——
linuxlinux_kernel——
linuxlinux_kernel>= 0 < 5.10.113-15.10.113-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 0 < 5.17.3-15.17.3-1
linuxlinux_kernel>= 3.8.1 < 4.9.3114.9.311
linuxlinux_kernel>= 4.10 < 4.14.2764.14.276
linuxlinux_kernel>= 4.15 < 4.19.2384.19.238
linuxlinux_kernel>= 4.20 < 5.4.1895.4.189
linuxlinux_kernel>= 5.11 < 5.15.345.15.34
linuxlinux_kernel>= 5.16 < 5.16.205.16.20
linuxlinux_kernel>= 5.17 < 5.17.35.17.3
linuxlinux_kernel>= 5.5 < 5.10.1115.10.111

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.