Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2023-1476

Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222

Description

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

References