Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49426

iommu/arm-smmu-v3-sva: Fix mm use-after-free

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64_mm_context_put() without holding a reference to the mm, which can result in use-after-free. Call mmgrab()/mmdrop() to ensure the mm only gets freed after we unpinned the ASID.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 32784a9562fb0518b12e9797ee2aec52214adf6f to < fc90f13ea0dcd960e5002d204fa55cec4e0db2faaffected
  • 32784a9562fb0518b12e9797ee2aec52214adf6f to < e3cbbdbff8a4db5d053c53fd71be62ccccdb52b0affected
  • 32784a9562fb0518b12e9797ee2aec52214adf6f to < 9aa215450888cf29af0c479e14a712dc6b0c506caffected
  • 32784a9562fb0518b12e9797ee2aec52214adf6f to < cbd23144f7662b00bcde32a938c4a4057e476d68affected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.15.46 to ≤ 5.15.*unaffected
  • 5.17.14 to ≤ 5.17.*unaffected
  • 5.18.3 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References