CVE-2022-49554

CVE-2022-49554 is a vulnerability in the Linux kernel's zsmalloc subsystem, which is responsible for compressed memory allocation. This flaw arises from race conditions between asynchronous zspage freeing and page migration operations.

This vulnerability is rated with a Low severity impact on Red Hat Enterprise Linux because the zsmalloc memory allocator is not enabled or utilized in standard default installations, and triggering the flaw requires local privileges and specific memory management activity. The race condition occurs during asynchronous memory page freeing alongside page migration, which is only reachable if compressed memory backends such as zram or zswap are explicitly configured. Successful exploitation by an authenticated local user could result in a system crash, leading to a denial of service without compromising system confidentiality or data integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.