CVE-2022-48986

A flaw was found in the Linux kernel. A local user could trigger a kernel panic by exploiting incorrect handling of dax puds within the gup_pud_range() function. This vulnerability, related to how the kernel manages memory for Direct Access (DAX) filesystems, could lead to a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as having Moderate impact because it requires local system access and leads to a denial of service via a kernel panic, without compromising data integrity or confidentiality. In Red Hat Enterprise Linux environments, exploitation depends on configurations using Direct Access (DAX) mappings backed by page upper directory (PUD) huge pages, which are primarily found in specialized persistent memory deployments. Standard enterprise workloads that do not interact with DAX-mounted filesystems or devices remain unaffected by this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.