CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
5.2%
mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to
leaf anon_vma double reuse.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | linux | < 4.15.0-200.211 | UNKNOWN |
ubuntu | 20.04 | noarch | linux | < 5.4.0-132.148 | UNKNOWN |
ubuntu | 22.04 | noarch | linux | < 5.15.0-56.62 | UNKNOWN |
ubuntu | 14.04 | noarch | linux | < 3.13.0-192.243 | UNKNOWN |
ubuntu | 16.04 | noarch | linux | < 4.4.0-235.269 | UNKNOWN |
ubuntu | 18.04 | noarch | linux-aws | < 4.15.0-1146.158 | UNKNOWN |
ubuntu | 20.04 | noarch | linux-aws | < 5.4.0-1089.97 | UNKNOWN |
ubuntu | 22.04 | noarch | linux-aws | < 5.15.0-1026.30 | UNKNOWN |
ubuntu | 14.04 | noarch | linux-aws | < 4.4.0-1114.120 | UNKNOWN |
ubuntu | 16.04 | noarch | linux-aws | < 4.4.0-1152.167 | UNKNOWN |
bugs.chromium.org/p/project-zero/issues/detail?id=2351
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b
git.kernel.org/linus/2555283eb40df89945557273121e9393ef9b542b (6.0-rc4)
github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b
launchpad.net/bugs/cve/CVE-2022-42703
nvd.nist.gov/vuln/detail/CVE-2022-42703
security-tracker.debian.org/tracker/CVE-2022-42703
ubuntu.com/security/notices/USN-5728-1
ubuntu.com/security/notices/USN-5728-2
ubuntu.com/security/notices/USN-5728-3
ubuntu.com/security/notices/USN-5755-1
ubuntu.com/security/notices/USN-5755-2
ubuntu.com/security/notices/USN-5756-1
ubuntu.com/security/notices/USN-5756-2
ubuntu.com/security/notices/USN-5756-3
ubuntu.com/security/notices/USN-5757-1
ubuntu.com/security/notices/USN-5757-2
ubuntu.com/security/notices/USN-5758-1
ubuntu.com/security/notices/USN-5773-1
ubuntu.com/security/notices/USN-5774-1
ubuntu.com/security/notices/USN-5779-1
ubuntu.com/security/notices/USN-5789-1
ubuntu.com/security/notices/USN-5916-1
www.cve.org/CVERecord?id=CVE-2022-42703