CVE-2022-41222High· 7.0▾ MidnightPoC availablemm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 38.5 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
Exploit / PoC code exists
0.5% → 0.5%
mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.
linux_kernel >= 5.0, < 5.4.211linux_kernel >= 5.5, < 5.10.137linux_kernel >= 5.11, < 5.12.18linux_kernel >= 5.13, < 5.13.3debian_linux = 10.0hci_baseboard_management_controller = h300shci_baseboard_management_controller = h410chci_baseboard_management_controller = h410shci_baseboard_management_controller = h500shci_baseboard_management_controller = h700subuntu_linux = 18.04ubuntu_linux = 20.04ubuntu_linux = 22.04Upgrade past the affected range:
linux_kernel 5.13.3Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-3649Low· 3.1A vulnerability was found in Linux Kernel
CVE-2023-32233High· 7.8In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory
CVE-2023-3141High· 7.1A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel
CVE-2022-42719High· 8.8A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
CVE-2022-42720High· 7.8Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentia…
CVE-2022-20421High· 7.8In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free