CVE-2022-50147: In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix get_nodes out of bound access When user specified more nodes than…

PriorityP428high7.1CVSS 3.1

AVLACLPRLUINSUCHINAH

EPSS

0.16%

6.0th percentile

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix get_nodes out of bound access When user specified more nodes than supported, get_nodes will access nmask array out of bounds.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.0.2-1 (bookworm)	linux 6.0.2-1 (bookworm)
linux	linux	—	—
linux	linux	>= e130242dc351f1cfa2bbeb6766a1486ce936ef88 < 44652154484e7e3d12008802cfb6c28a8aa16d85	44652154484e7e3d12008802cfb6c28a8aa16d85
linux	linux	>= e130242dc351f1cfa2bbeb6766a1486ce936ef88 < 8176f6a0d9c1b06bc7af7c3d6acd4a66448939df	8176f6a0d9c1b06bc7af7c3d6acd4a66448939df
linux	linux	>= e130242dc351f1cfa2bbeb6766a1486ce936ef88 < d1b5113674c3e95bb53c601ce2ea4719e851c74d	d1b5113674c3e95bb53c601ce2ea4719e851c74d
linux	linux	>= e130242dc351f1cfa2bbeb6766a1486ce936ef88 < 000eca5d044d1ee23b4ca311793cf3fc528da6c6	000eca5d044d1ee23b4ca311793cf3fc528da6c6
linux	linux_kernel	>= 0 < 6.0.2-1	6.0.2-1
linux	linux_kernel	>= 0 < 6.0.2-1	6.0.2-1
linux	linux_kernel	>= 0 < 6.0.2-1	6.0.2-1
linux	linux_kernel	>= 5.15 < 5.15.61	5.15.61
linux	linux_kernel	>= 5.16 < 5.18.18	5.18.18
linux	linux_kernel	>= 5.19 < 5.19.2	5.19.2

CVSS provenance

nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

osv7.1HIGH

vendor_debian7.1HIGH

vendor_redhat7.1HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.