CVE-2022-49426

published 2025-02-26

CVE-2022-49426: In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64_mm_context_put()…

Priority P3 38 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

In the Linux kernel, the following vulnerability has been resolved:

iommu/arm-smmu-v3-sva: Fix mm use-after-free

We currently call arm64_mm_context_put() without holding a reference to
the mm, which can result in use-after-free. Call mmgrab()/mmdrop() to
ensure the mm only gets freed after we unpinned the ASID.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 5.18.5-1 (bookworm)	linux 5.18.5-1 (bookworm)
linux	linux	—	—
linux	linux	>= 32784a9562fb0518b12e9797ee2aec52214adf6f < fc90f13ea0dcd960e5002d204fa55cec4e0db2fa	fc90f13ea0dcd960e5002d204fa55cec4e0db2fa
linux	linux	>= 32784a9562fb0518b12e9797ee2aec52214adf6f < e3cbbdbff8a4db5d053c53fd71be62ccccdb52b0	e3cbbdbff8a4db5d053c53fd71be62ccccdb52b0
linux	linux	>= 32784a9562fb0518b12e9797ee2aec52214adf6f < 9aa215450888cf29af0c479e14a712dc6b0c506c	9aa215450888cf29af0c479e14a712dc6b0c506c
linux	linux	>= 32784a9562fb0518b12e9797ee2aec52214adf6f < cbd23144f7662b00bcde32a938c4a4057e476d68	cbd23144f7662b00bcde32a938c4a4057e476d68
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 0 < 5.18.5-1	5.18.5-1
linux	linux_kernel	>= 5.11 < 5.15.46	5.15.46
linux	linux_kernel	>= 5.16 < 5.17.14	5.17.14
linux	linux_kernel	>= 5.18 < 5.18.3	5.18.3

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv 7.8 HIGH

vendor_debian 7.8 HIGH

vendor_redhat 7.8 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-416