vulnerability
Ubuntu: (CVE-2022-49004): linux vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:S/C:N/I:N/A:C) | Oct 21, 2024 | Nov 19, 2024 | Sep 1, 2025 |
Description
In the Linux kernel, the following vulnerability has been resolved:
riscv: Sync efi page table's kernel mappings before switching
The EFI page table is initially created as a copy of the kernel page table.
With VMAP_STACK enabled, kernel stacks are allocated in the vmalloc area:
if the stack is allocated in a new PGD (one that was not present at the
moment of the efi page table creation or not synced in a previous vmalloc
fault), the kernel will take a trap when switching to the efi page table
when the vmalloc kernel stack is accessed, resulting in a kernel panic.
Fix that by updating the efi kernel mappings before switching to the efi
page table.
Solutions
References
- CVE-2022-49004
- https://attackerkb.com/topics/CVE-2022-49004
- URL-https://git.kernel.org/linus/3f105a742725a1b78766a55169f1d827732e62b8
- URL-https://git.kernel.org/stable/c/3f105a742725a1b78766a55169f1d827732e62b8
- URL-https://git.kernel.org/stable/c/96f479383d92944406d4b3f2bc03c2f640def9f1
- URL-https://git.kernel.org/stable/c/fa7a7d185ef380546b4b1fed6f84f31dbae8cec7
- URL-https://www.cve.org/CVERecord?id=CVE-2022-49004
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.