Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-49562

KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits

High7.8EPSS 0.28%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use __try_cmpxchg_user() to update guest PTE A/D bits Use the recently introduced __try_cmpxchg_user() to update guest PTE A/D bits instead of mapping the PTE into kernel address space. The VM_PFNMAP path is broken as it assumes that vm_pgoff is the base pfn of the mapped VMA range, which is conceptually wrong as vm_pgoff is the offset relative to the file and has nothing to do with the pfn. The horrific hack worked for the original use case (backing guest memory with /dev/mem), but leads to accessing "random" pfns for pretty much any other VM_PFNMAP case.

Scores

CVSS scores of CVE-2022-49562, by who scored it
Scored byCVSSScoreVector
LinuxCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.28% · top 79% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Affected products

  • Linux · Linux

    • affected bd53cb35a3e9adb73a834a36586e9ad80e877767 – < 38b888911e8dc89b89d8147cfb1d2dbe6373bf78
    • affected bd53cb35a3e9adb73a834a36586e9ad80e877767 – < 8089e5e1d18402fb8152d6b6815450a36fffa9b0
    • affected bd53cb35a3e9adb73a834a36586e9ad80e877767 – < f122dfe4476890d60b8c679128cd2259ec96a24c

  • Linux · Linux

    • affected 5.2
    • unaffected < 5.2
    • unaffected 5.17.13 – ≤ 5.17.*
    • unaffected 5.18.2 – ≤ 5.18.*
    • unaffected 5.19 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-49562 badge
[![CVE-2022-49562](https://trackcve.app/badge/CVE-2022-49562.svg)](https://trackcve.app/cve/CVE-2022-49562)

Record last updated .