CVE-2022-49991
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49991
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49991.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49991
- Downstream
- Published
- 2025-06-18T11:00:51Z
- Modified
- 2025-10-21T11:41:44.735016Z
- Summary
- mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb: avoid corrupting page->mapping in hugetlbmcopyatomic_pte
In MCOPYATOMICCONTINUE case with a non-shared VMA, pages in the page cache are installed in the ptes. But hugepageaddnewanonrmap is called for them mistakenly because they're not vm_shared. This will corrupt the page->mapping used by page cache code.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedf619147104c8ea71e120e4936d2b68ec11a1e527Fixedda60ddd80d09f8371fbba1a238a4b318d13ba698
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedf619147104c8ea71e120e4936d2b68ec11a1e527Fixed3ada1b3e58db255a14ec73a59d7913e84dc5a8a4
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedf619147104c8ea71e120e4936d2b68ec11a1e527Fixedab74ef708dc51df7cf2b8a890b9c6990fac5c0c6
Affected versions
v5.*
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.11
v5.15.12
v5.15.13
v5.15.14
v5.15.15
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.6
v5.15.60
v5.15.61
v5.15.62
v5.15.63
v5.15.64
v5.15.7
v5.15.8
v5.15.9
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.19.1
v5.19.2
v5.19.3
v5.19.4
v5.19.5
v6.*
v6.0-rc1
v6.0-rc2
Database specific
vanir_signatures
[
{
"id": "CVE-2022-49991-14a6d035",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da60ddd80d09f8371fbba1a238a4b318d13ba698",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"336176580891545467261110321634892770915",
"211172017405287201665834857011841984656",
"330500491885957041026015301144584597691",
"94328870581614922031319378524566787838"
]
},
"target": {
"file": "mm/hugetlb.c"
}
},
{
"id": "CVE-2022-49991-7eeacee1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ada1b3e58db255a14ec73a59d7913e84dc5a8a4",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"274964915393830890699876442805294418314",
"318382761027633474806439236933137390313",
"278742688572231930098186624448645952591",
"225509389028233385223994143253565032964"
]
},
"target": {
"file": "mm/hugetlb.c"
}
},
{
"id": "CVE-2022-49991-e55f26f3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ab74ef708dc51df7cf2b8a890b9c6990fac5c0c6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"274964915393830890699876442805294418314",
"318382761027633474806439236933137390313",
"278742688572231930098186624448645952591",
"225509389028233385223994143253565032964"
]
},
"target": {
"file": "mm/hugetlb.c"
}
}
]