CVE-2022-49052

A denial of service vulnerability exists in the Linux kernel where two or more processes are shared using the CLONE_VM feature. This allows one process to see memory that has been deleted, effectively causing it to be corrupted by unexpected zeroed pages.

This vulnerability is classified as Moderate rather than Low because it can cause memory corruption or abrupt termination in multi-threaded processes, although exploitation demands a non-default swap architecture. The flaw is triggered only when zram block devices are utilized as swap partitions and multiple threads sharing address space handle concurrent page faults. Standard Red Hat Enterprise Linux installations do not enable or configure zram swap by default, thereby restricting exposure in normal production environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.