CVE-2022-49852

riscv: process: fix kernel info leakage

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 11, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: process: fix kernel info leakage

thread_struct's s[12] may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s[12] array in thread_struct when fork.

As for kthread case, it's better to clear the s[12] array as well.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7db91e57a0acde126a162ababfb1e0ab190130cb to before c4601d30f7d989b4f354df899ab85b5f7a750d30Affected 7db91e57a0acde126a162ababfb1e0ab190130cb to before c5c0b3167537793a7cf936fb240366eefd2fc7fbAffected 7db91e57a0acde126a162ababfb1e0ab190130cb to before e56d18a976dda653194218df6d40d8122c775712Affected 7db91e57a0acde126a162ababfb1e0ab190130cb to before cc36c7fa5d9384602529ba3eea8c5daee7be4dbcAffected 7db91e57a0acde126a162ababfb1e0ab190130cb to before 358a68f98304b40b201ba5afe94c20355aa3dc68Affected 7db91e57a0acde126a162ababfb1e0ab190130cb to before 6510c78490c490a6636e48b61eeaa6fb65981f4bAffected
LinuxLinux	4.15Affected before 4.15Not affected 4.19.267 through 4.19.Not affected 5.4.225 through 5.4.Not affected 5.10.155 through 5.10.Not affected 5.15.79 through 5.15.Not affected 6.0.9 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

7db91e57a0acde126a162ababfb1e0ab190130cb to before c4601d30f7d989b4f354df899ab85b5f7a750d30Affected
7db91e57a0acde126a162ababfb1e0ab190130cb to before c5c0b3167537793a7cf936fb240366eefd2fc7fbAffected
7db91e57a0acde126a162ababfb1e0ab190130cb to before e56d18a976dda653194218df6d40d8122c775712Affected
7db91e57a0acde126a162ababfb1e0ab190130cb to before cc36c7fa5d9384602529ba3eea8c5daee7be4dbcAffected
7db91e57a0acde126a162ababfb1e0ab190130cb to before 358a68f98304b40b201ba5afe94c20355aa3dc68Affected
7db91e57a0acde126a162ababfb1e0ab190130cb to before 6510c78490c490a6636e48b61eeaa6fb65981f4bAffected

LinuxLinux

4.15Affected
before 4.15Not affected
4.19.267 through 4.19.*Not affected
5.4.225 through 5.4.*Not affected
5.10.155 through 5.10.*Not affected
5.15.79 through 5.15.*Not affected
6.0.9 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.