mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.
Fix
Public exploits 2
- Satheesh575555/linux-4.1.15_CVE-2022-42703 PoC on GitHub
- Squirre17/hbp-attack-demo PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 6
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7 Mailing List, Patch, Vendor Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b Mailing List, Patch, Vendor Advisory
- https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b Patch, Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7 Mailing List, Patch, Vendor Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b Mailing List, Patch, Vendor Advisory
- https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · linuxNVD modified 2026-10-14 19:16
Affected (CPE criteria) 1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References 12
- https://bugs.chromium.org/p/project-zero/issues/detail?id=2351 Exploit, Mailing List, Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7 Mailing List, Patch, Vendor Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b Mailing List, Patch, Vendor Advisory
- https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b Patch, Third Party Advisory
- https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html Exploit, Technical Description, Third Party Advisory
- https://bugs.chromium.org/p/project-zero/issues/detail?id=2351 Exploit, Mailing List, Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7 Mailing List, Patch, Vendor Advisory
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b Mailing List, Patch, Vendor Advisory
- https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b Patch, Third Party Advisory
- https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html Exploit, Technical Description, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html