n/a vulnerability

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.

Published 21 Sep 2022Updated 14 Oct 202635 sources
CVSS 7.0 ✓ VERIFIED REFERENCE

What happened

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.

Affected versions

n/a: n/a; before V1.1 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

RepositoryAuthorFirst seenReference
bugs.chromium.orgNVD reference2022-09-21Verified