CVE-2022-49426

Summary

CVE-2022-44926 is a vulnerability affecting the Linux kernel's IOMMU subsystem for ARM-SMMU-V3-SVA. This issue involves a use-after-free condition, where the function arm64_mm_context_put() is called without holding a reference to the memory manager (mm). As a result, the mm may be freed prematurely, leading to potential memory corruption and security vulnerabilities. To mitigate this risk, it is recommended to use mmgrab()/mmdrop() to ensure the mm is only freed after the ASID is unpinned.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.