CVE-2022-49991

mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte

State: Published
Severity: 7.8 High
Published: Jun 18, 2025
Updated: Aug 5, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte

In MCOPY_ATOMIC_CONTINUE case with a non-shared VMA, pages in the page cache are installed in the ptes. But hugepage_add_new_anon_rmap is called for them mistakenly because they're not vm_shared. This will corrupt the page->mapping used by page cache code.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f619147104c8ea71e120e4936d2b68ec11a1e527 to before da60ddd80d09f8371fbba1a238a4b318d13ba698Affected f619147104c8ea71e120e4936d2b68ec11a1e527 to before 3ada1b3e58db255a14ec73a59d7913e84dc5a8a4Affected f619147104c8ea71e120e4936d2b68ec11a1e527 to before ab74ef708dc51df7cf2b8a890b9c6990fac5c0c6Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.65 through 5.15.Not affected 5.19.6 through 5.19.Not affected 6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.