CVE-2022-48991

A flaw was found in the Linux kernel. The memory management unit (MMU) notifiers were not properly invoked when page table entries were removed during certain memory collapse operations. This oversight could lead to a use-after-free vulnerability, where the system attempts to access deallocated memory. A local attacker could potentially exploit this flaw to cause a denial of service or achieve privilege escalation.

This issue is considered to be a moderate impact flaw, as the reproduction (and exploit) for this is complex and not available.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.