CVE-2022-50285

mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages

State: Published
Severity: Not scored
Published: Sep 15, 2025
Updated: May 23, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages

The h->*_huge_pages counters are protected by the hugetlb_lock, but alloc_huge_page has a corner case where it can decrement the counter outside of the lock.

This could lead to a corrupted value of h->resv_huge_pages, which we have observed on our systems.

Take the hugetlb_lock before decrementing h->resv_huge_pages to avoid a potential race.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a88c769548047b21f76fd71e04b6a3300ff17160 to before 3e50a07b6a5fcd39df1534d3fdaca4292a65efe6Affected a88c769548047b21f76fd71e04b6a3300ff17160 to before 629c986e19fe9481227c7cdfd9a105bbc104d245Affected a88c769548047b21f76fd71e04b6a3300ff17160 to before 2b35432d324898ec41beb27031d2a1a864a4d40eAffected a88c769548047b21f76fd71e04b6a3300ff17160 to before 11993652d0b49e27272db0a37aa828d8a3a4b92bAffected a88c769548047b21f76fd71e04b6a3300ff17160 to before 568e3812b1778b4c0c229649b59977d88f400eceAffected a88c769548047b21f76fd71e04b6a3300ff17160 to before 112a005d1ded04a4b41b6d01833cc0bda90625ccAffected a88c769548047b21f76fd71e04b6a3300ff17160 to before c828fab903725279aa9dc6ae3d44bb7e4778f92cAffected a88c769548047b21f76fd71e04b6a3300ff17160 to before 12df140f0bdfae5dcfc81800970dd7f6f632e00cAffected 3f5fae4d1a3189d95b02b4b45e1218df147122bcAffected 4.3.6 to before 4.4Affected
LinuxLinux	4.4Affected before 4.4Not affected 4.9.332 through 4.9.Not affected 4.14.298 through 4.14.Not affected 4.19.264 through 4.19.Not affected 5.4.223 through 5.4.Not affected 5.10.153 through 5.10.Not affected 5.15.76 through 5.15.Not affected 6.0.6 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

a88c769548047b21f76fd71e04b6a3300ff17160 to before 3e50a07b6a5fcd39df1534d3fdaca4292a65efe6Affected
a88c769548047b21f76fd71e04b6a3300ff17160 to before 629c986e19fe9481227c7cdfd9a105bbc104d245Affected
a88c769548047b21f76fd71e04b6a3300ff17160 to before 2b35432d324898ec41beb27031d2a1a864a4d40eAffected
a88c769548047b21f76fd71e04b6a3300ff17160 to before 11993652d0b49e27272db0a37aa828d8a3a4b92bAffected
a88c769548047b21f76fd71e04b6a3300ff17160 to before 568e3812b1778b4c0c229649b59977d88f400eceAffected
a88c769548047b21f76fd71e04b6a3300ff17160 to before 112a005d1ded04a4b41b6d01833cc0bda90625ccAffected
a88c769548047b21f76fd71e04b6a3300ff17160 to before c828fab903725279aa9dc6ae3d44bb7e4778f92cAffected
a88c769548047b21f76fd71e04b6a3300ff17160 to before 12df140f0bdfae5dcfc81800970dd7f6f632e00cAffected
3f5fae4d1a3189d95b02b4b45e1218df147122bcAffected
4.3.6 to before 4.4Affected

LinuxLinux

4.4Affected
before 4.4Not affected
4.9.332 through 4.9.*Not affected
4.14.298 through 4.14.*Not affected
4.19.264 through 4.19.*Not affected
5.4.223 through 5.4.*Not affected
5.10.153 through 5.10.*Not affected
5.15.76 through 5.15.*Not affected
6.0.6 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.