Resource management error in Linux kernel - CVE-2022-48986

Vulnerability identifier: #VU99144

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48986

CWE-ID: CWE-399

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the gup_pud_range() function in mm/gup.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Ubuntu
openEuler
linux (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-azure (Ubuntu package)
linux-gcp-fips (Ubuntu package)
kernel
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-headers
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
python3-perf-debuginfo

Install update from vendor's website.

Linux kernel - addressed in versions 5.4.227, 5.10.159, 5.15.83, 6.0.13, 6.1
linux (Ubuntu package) - addressed in versions 4.15.0.246.230, 4.15.0-246.258, 4.15.0-246.258~16.04.1, 4.15.0.246.258~16.04.1, 4.15.0.1150.155, 4.15.0-1150.161, 4.15.0-1150.161~16.04.1, 4.15.0.1150.161~16.04.1, 4.15.0.1170.161, 4.15.0-1170.175, 4.15.0.1188.186, 4.15.0-1188.201, 4.15.0.1188.201~16.04.1, 4.15.0-1188.201~16.04.1
linux-aws-fips (Ubuntu package) - addressed in versions 4.15.0.1143.140, 4.15.0-1143.155, 4.15.0.2126.120, 4.15.0-2126.132
linux-azure (Ubuntu package) - addressed in versions 4.15.0.1181.194, 4.15.0-1181.198, 4.15.0-1181.198~16.04.1, 4.15.0.1181.198~16.04.1, 4.15.0.1196.164, 4.15.0-1196.211, 4.15.0-1196.211~14.04.1, 4.15.0.1196.211~14.04.1, 4.15.0-1196.211~16.04.1, 4.15.0.1196.211~16.04.1, 4.15.0.2105.101, 4.15.0-2105.111
linux-gcp-fips (Ubuntu package) - addressed in versions 4.15.0.2089.87, 4.15.0-2089.95
kernel - update to 5.10.0-136.99.0.180
kernel-debuginfo - update to 5.10.0-136.99.0.180
kernel-debugsource - update to 5.10.0-136.99.0.180
kernel-devel - update to 5.10.0-136.99.0.180
kernel-headers - update to 5.10.0-136.99.0.180
kernel-source - update to 5.10.0-136.99.0.180
kernel-tools - update to 5.10.0-136.99.0.180
kernel-tools-debuginfo - update to 5.10.0-136.99.0.180
kernel-tools-devel - update to 5.10.0-136.99.0.180
perf - update to 5.10.0-136.99.0.180
perf-debuginfo - update to 5.10.0-136.99.0.180
python3-perf - update to 5.10.0-136.99.0.180
python3-perf-debuginfo - update to 5.10.0-136.99.0.180

• https://git.kernel.org/stable/c/04edfa3dc06ecfc6133a33bc7271298782dee875
• https://git.kernel.org/stable/c/f1cf856123ceb766c49967ec79b841030fa1741f
• https://git.kernel.org/stable/c/3ac29732a2ffa64c7de13a072b0f2848b9c11037
• https://git.kernel.org/stable/c/e06d13c36ded750c72521b600293befebb4e56c5
• https://git.kernel.org/stable/c/fcd0ccd836ffad73d98a66f6fea7b16f735ea920
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.159
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.83
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.227
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.13
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1

• Resource management error in Linux kernel mm
• openEuler 22.03 LTS SP1 update for kernel
• Ubuntu update for linux-aws-fips
• Ubuntu update for linux
• Ubuntu update for linux-azure
• Ubuntu update for linux-gcp-fips
• Ubuntu update for linux-azure