Skip to content
OpenAdvisories
High · 7.0 CVE-2023-1476 EUVD-2023-23724GHSA-rccq-5462-rgcj

Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222

Published Nov 3, 2023 · Updated Feb 27, 2025 · Assigned by redhat

Description

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 8 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
RHEL 8 kpatch-patch-4_18_0-425_10_1 1-4.el8_7 RHSA-2023:1659
RHEL 8 kpatch-patch-4_18_0-425_13_1 1-2.el8_7 RHSA-2023:1659
RHEL 8 kpatch-patch-4_18_0-425_3_1 1-6.el8 RHSA-2023:1659

Advisories 2

References