CVE-2022-49426

HIGH

Linux Kernel 5.11-5.11, 5.16-5.17.14, 5.18-5.18.3 - Use-After-Free in ARM SMMUv3 SVA Context Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64_mm_context_put() without holding a reference to the mm, which can result in use-after-free. Call mmgrab()/mmdrop() to ensure the mm only gets freed after we unpinned the ASID.

References (4)

Core 4

Scores

CVSS v3 7.8
EPSS 0.0027
EPSS Percentile 19.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (14)
linux/Kernel 5.11.0 - 5.15.46linux
linux/Kernel 5.16.0 - 5.17.14linux
linux/Kernel 5.18.0 - 5.18.3linux
Linux/Linux < 5.11
Linux/Linux 32784a9562fb0518b12e9797ee2aec52214adf6f - 9aa215450888cf29af0c479e14a712dc6b0c506c
Linux/Linux 32784a9562fb0518b12e9797ee2aec52214adf6f - cbd23144f7662b00bcde32a938c4a4057e476d68
Linux/Linux 32784a9562fb0518b12e9797ee2aec52214adf6f - e3cbbdbff8a4db5d053c53fd71be62ccccdb52b0
Linux/Linux 32784a9562fb0518b12e9797ee2aec52214adf6f - fc90f13ea0dcd960e5002d204fa55cec4e0db2fa
Linux/Linux 5.11
Linux/Linux 5.15.46 - 5.15.*
... and 4 more
Published Feb 26, 2025
Tracked Since Feb 18, 2026