Database/Kernel, userspace & hypervisor
Linux kernel (mm anon_vma): Use-after-free from leaf anon_vma double reuse - memory corruption / privesc primitive
CVSS 5.5CVE-2022-42703Kernel, userspace & hypervisorcurated
Impact
Use-after-free from leaf anon_vma double reuse - memory corruption / privesc primitive
Who can reach it
Local user / tenant process
What to do
Livepatchable; otherwise drain + reboot
References
Related entries
- Linux kernel (KASLR): EntryBleed: prefetch side channel defeats KASLR even with KPTICVE-2022-4543 · Linux kernel (KASLR)Medium
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A NULL pointer dereference in the amdkfd (KFD computeCVE-2022-49055 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)Medium
- Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd): A race condition or locking defect in the amdkfd (KFDCVE-2022-49133 · Linux kernel amdkfd (KFD compute driver, /dev/kfd) (drm/amdkfd)Medium
- Linux kernel (drivers/vfio/pci): Whoever holds the VFIO device fd for a passed-through PCI function can make the hostCVE-2022-49219 · Linux kernel (drivers/vfio/pci)Medium
- Linux kernel (arch/x86/kvm/vmx): Between the point where KVM loads the guest's SPEC_CTRL value and the actual VM entryCVE-2022-49610 · Linux kernel (arch/x86/kvm/vmx)Medium
- Linux kernel (drivers/gpu/drm/scheduler): When a process is killed with GPU work still queued, the scheduler entityCVE-2022-49829 · Linux kernel (drivers/gpu/drm/scheduler)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.