github - ghsa-mff9-6jh8-rgqf

ghsa-mff9-6jh8-rgqf

Vulnerability from github

Published

2025-10-01 12:30

Modified

2025-10-01 12:30

Details

In the Linux kernel, the following vulnerability has been resolved:

mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in

When PTE_MARKER_UFFD_WP not configured, it's still possible to reach pte marker code and trigger an warning. Add a few CONFIG_PTE_MARKER_UFFD_WP ifdefs to make sure the code won't be reached when not compiled in.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-50448"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-10-01T12:15:37Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in\n\nWhen PTE_MARKER_UFFD_WP not configured, it\u0027s still possible to reach pte\nmarker code and trigger an warning. Add a few CONFIG_PTE_MARKER_UFFD_WP\nifdefs to make sure the code won\u0027t be reached when not compiled in.",
  "id": "GHSA-mff9-6jh8-rgqf",
  "modified": "2025-10-01T12:30:28Z",
  "published": "2025-10-01T12:30:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-50448"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2204a880cb0c51952463a24a4fa01a6514c5a25a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/515778e2d790652a38a24554fdb7f21420d91efc"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b76e4eb02e9edb9a0a51942acdb373ca01346e8c"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2022-50448 (GCVE-0-2022-50448)

Vulnerability from cvelistv5

Published

2025-10-01 11:45

Modified

2025-10-01 11:45

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in When PTE_MARKER_UFFD_WP not configured, it's still possible to reach pte marker code and trigger an warning. Add a few CONFIG_PTE_MARKER_UFFD_WP ifdefs to make sure the code won't be reached when not compiled in.

References

URL

Tags

	https://git.kernel.org/stable/c/b76e4eb02e9edb9a0a51942acdb373ca01346e8c
	https://git.kernel.org/stable/c/2204a880cb0c51952463a24a4fa01a6514c5a25a
	https://git.kernel.org/stable/c/515778e2d790652a38a24554fdb7f21420d91efc

Impacted products

Vendor

Product

Version

Version: b1f9e876862d8f7176299ec4fb2108bc1045cbc8
Version: b1f9e876862d8f7176299ec4fb2108bc1045cbc8
Version: b1f9e876862d8f7176299ec4fb2108bc1045cbc8

Version: 5.19

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "mm/hugetlb.c",
            "mm/memory.c",
            "mm/mprotect.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b76e4eb02e9edb9a0a51942acdb373ca01346e8c",
              "status": "affected",
              "version": "b1f9e876862d8f7176299ec4fb2108bc1045cbc8",
              "versionType": "git"
            },
            {
              "lessThan": "2204a880cb0c51952463a24a4fa01a6514c5a25a",
              "status": "affected",
              "version": "b1f9e876862d8f7176299ec4fb2108bc1045cbc8",
              "versionType": "git"
            },
            {
              "lessThan": "515778e2d790652a38a24554fdb7f21420d91efc",
              "status": "affected",
              "version": "b1f9e876862d8f7176299ec4fb2108bc1045cbc8",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "mm/hugetlb.c",
            "mm/memory.c",
            "mm/mprotect.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.19"
            },
            {
              "lessThan": "5.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.19.*",
              "status": "unaffected",
              "version": "5.19.17",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19.17",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.3",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in\n\nWhen PTE_MARKER_UFFD_WP not configured, it\u0027s still possible to reach pte\nmarker code and trigger an warning. Add a few CONFIG_PTE_MARKER_UFFD_WP\nifdefs to make sure the code won\u0027t be reached when not compiled in."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-01T11:45:22.513Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b76e4eb02e9edb9a0a51942acdb373ca01346e8c"
        },
        {
          "url": "https://git.kernel.org/stable/c/2204a880cb0c51952463a24a4fa01a6514c5a25a"
        },
        {
          "url": "https://git.kernel.org/stable/c/515778e2d790652a38a24554fdb7f21420d91efc"
        }
      ],
      "title": "mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50448",
    "datePublished": "2025-10-01T11:45:22.513Z",
    "dateReserved": "2025-09-17T14:53:07.011Z",
    "dateUpdated": "2025-10-01T11:45:22.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.