CVE-2022-49076 Details
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix use-after-free bug for mm struct Under certain conditions, such as MPI_Abort, the hfi1 cleanup code may represent the last reference held on the task mm. hfi1_mmu_rb_unregister() then drops the last reference and the mm is freed before the final use in hfi1_release_user_pages(). A new task may allocate the mm structure while it is still being used, resulting in problems. One manifestation is corruption of the mmap_sem counter leading to a hang in down_write(). Another is corruption of an mm struct that is in use by another task.
A use-after-free vulnerability has been identified in the Linux kernel's RDMA/hfi1 component. This issue arises under certain conditions, such as during an MPI_Abort, when the hfi1 cleanup process may prematurely release the last reference to a task's memory management structure. As a result, a new task could allocate the memory structure while it is still in use, leading to various problems. One consequence is the corruption of the memory management semaphore counter, causing a deadlock during write operations. Additionally, this vulnerability can corrupt a memory management structure that another task is actively using.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 27, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0b7186d657ee55e2cdefae498f07d5c1961e8023 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2bbac98d0930e8161b1957dc0ec99de39ade1b3c | kernel.org | Patch |
| https://git.kernel.org/stable/c/5a9a1b24ddb510715f8f621263938186579a965c | kernel.org | Patch |
| https://git.kernel.org/stable/c/5f54364ff6cfcd14cddf5441c4a490bb28dd69f7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9ca11bd8222a612de0d2f54d050bfcf61ae2883f | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.9.12, < 5.10.111 >= 5.11, < 5.15.34 >= 5.16, < 5.16.20 >= 5.17, < 5.17.3 5.18 rc1 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 24, 2025 | Initial Analysis | [email protected] |
| Feb 27, 2025 | CVE Modified | CISA-ADP |
| Feb 26, 2025 | New CVE Received | kernel.org |