PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2023-1476

CVE-2023-1476

kpatch: mm/mremap.c: incomplete fix for CVE-2022-41222

Loading…

Severity

Important

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · March 7, 2023

Updated · November 22, 2025

Description

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue occurs due to a race condition between rmap walk and mremap, allowing a local user to crash the system or potentially escalate their privileges on the system.

Statement

Red Hat Product Security is aware of this issue. Updates will be released as they become available.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 · Use After Free