Skip to content

mm/rmap: Fix use-after-free related to leaf anon_vma double reuse (CVE-2022-42703)

Waiman Long requested to merge llong1/centos-stream-9:bz2137587_rmap into main

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2137587
CVE: CVE-2022-42703
MR: !1529 (merged)
Tested: A reproducer was run before and after the application of this patchset to verify that leaf anon_vma double reuse did not happen after the patch.

This MR fixes a mm/rmap.c bug in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.

Signed-off-by: Waiman Long longman@redhat.com

Edited by Waiman Long

Merge request reports