CVE-2022-42703CWE-416

CVE-2022-42703

Medium · published October 10, 2022

CVSS v3.1
5.5
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00920 · 59.9th percentile
Weakness
CWE-416 · Use After Free
Published
2022-10-10T03:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 5.19.75.19.7
References (12)
https://bugs.chromium.org/p/project-zero/issues/detail?id=2351 · [email protected]https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7 · [email protected]https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b · [email protected]https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b · [email protected]https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html · [email protected]https://bugs.chromium.org/p/project-zero/issues/detail?id=2351 · af854a3a-2127-422b-91ae-364da2661108https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b · af854a3a-2127-422b-91ae-364da2661108https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b · af854a3a-2127-422b-91ae-364da2661108https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-794697.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-831302.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 09 OCT 00:00Z
    mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse
    cvelistv5