suse · CVE-2022-49991

Quick triage

Priority: medium Published: 2025-06-18 23:41:25 UTC Updated: 2025-12-23 02:30:33 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2022-49991 severity moderate: SUSE including 53 source package names (bpftool-7.0.0-284.11.1.el9_2, cluster-md-kmp-default, …), 246 product×package rows across 43 product lines (SLES-LTSS-TERADATA 15 SP2, SUSE Liberty Linux 9, … (43 product lines)): Known Not Affected 219, Fixed 27.

Description:

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte In MCOPY_ATOMIC_CONTINUE case with a non-shared VMA, pages in the page cache are installed in the ptes. But hugepage_add_new_anon_rmap is called for them mistakenly because they're not vm_shared. This will corrupt the page->mapping used by page cache code.

cvelogic Threat Intelligence