CVE-2022-49080

MEDIUM EPSS 16.8%
Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpol_new leak in shared_policy_replace If mpol_new is allocated but not used in restart loop, mpol_new will be freed via mpol_put before returning to the caller. But refcnt is not initialized yet, so mpol_put could not do the right things and might leak the unused mpol_new. This would happen if mempolicy was updated on the shared shmem file while the sp->lock has been dropped during the memory allocation. This issue could be triggered easily with the below code snippet if there are many processes doing the below work at the same time: shmid = shmget((key_t)5566, 1024 * PAGE_SIZE, 0666|IPC_CREAT); shm = shmat(shmid, 0, 0); loop many times { mbind(shm, 1024 * PAGE_SIZE, MPOL_LOCAL, mask, maxnode, 0); mbind(shm + 128 * PAGE_SIZE, 128 * PAGE_SIZE, MPOL_DEFAULT, mask, maxnode, 0); }

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
16.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 16

VendorProductVersionRange
linuxlinux_kernel*≥3.8.1  –  <4.9.311
linuxlinux_kernel*≥4.10  –  <4.14.276
linuxlinux_kernel*≥4.15  –  <4.19.238
linuxlinux_kernel*≥4.20  –  <5.4.189
linuxlinux_kernel*≥5.5  –  <5.10.111
linuxlinux_kernel*≥5.11  –  <5.15.34
linuxlinux_kernel*≥5.16  –  <5.16.20
linuxlinux_kernel*≥5.17  –  <5.17.3
linuxlinux_kernel3.8any
linuxlinux_kernel3.8any
linuxlinux_kernel3.8any
linuxlinux_kernel3.8any
linuxlinux_kernel3.8any
linuxlinux_kernel3.8any
linuxlinux_kernel3.8any
linuxlinux_kernel5.18any

References 9

  • git.kernel.org https://git.kernel.org/stable/c/198932a14aeb19a15cf19e51e151d023bc4cd648
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/25f506273b6ae806fd46bfcb6fdaa5b9ec81a05b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/39a32f3c06f6d68a530bf9612afa19f50f12e93d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4ad099559b00ac01c3726e5c95dc3108ef47d03e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5e16dc5378abd749a836daa9ee4ab2c8d2668999
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6e00309ac716fa8225f0cbde2cd9c24f0e74ee21
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8510c2346d9e47a72b7f018a36ef0c39483e53d6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f7e183b0a7136b6dc9c7b9b2a85a608a8feba894
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fe39ac59dbbf893b73b24e3184161d0bd06d6651
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/198932a14aeb19a15cf19e51e151d023bc4cd648
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/25f506273b6ae806fd46bfcb6fdaa5b9ec81a05b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/39a32f3c06f6d68a530bf9612afa19f50f12e93d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4ad099559b00ac01c3726e5c95dc3108ef47d03e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5e16dc5378abd749a836daa9ee4ab2c8d2668999
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6e00309ac716fa8225f0cbde2cd9c24f0e74ee21
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8510c2346d9e47a72b7f018a36ef0c39483e53d6
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f7e183b0a7136b6dc9c7b9b2a85a608a8feba894
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fe39ac59dbbf893b73b24e3184161d0bd06d6651
    Patch