CVE - CVE-2022-49989

CVE-ID
CVE-2022-49989	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix error exit of privcmd_ioctl_dm_op() The error exit of privcmd_ioctl_dm_op() is calling unlock_pages() potentially with pages being NULL, leading to a NULL dereference. Additionally lock_pages() doesn't check for pin_user_pages_fast() having been completely successful, resulting in potentially not locking all pages into memory. This could result in sporadic failures when using the related memory in user mode. Fix all of that by calling unlock_pages() always with the real number of pinned pages, which will be zero in case pages being NULL, and by checking the number of pages pinned by pin_user_pages_fast() matching the expected number of pages.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/45d47bd9b96e7874b98dbcc7602fe2826c5d62a6 URL:https://git.kernel.org/stable/c/45d47bd9b96e7874b98dbcc7602fe2826c5d62a6 MISC:https://git.kernel.org/stable/c/6de50db104af0dc921f593fd95c55db86a52ceef URL:https://git.kernel.org/stable/c/6de50db104af0dc921f593fd95c55db86a52ceef MISC:https://git.kernel.org/stable/c/c2b7bae7c90051fd6a679d5dee00400d67ebbf4a URL:https://git.kernel.org/stable/c/c2b7bae7c90051fd6a679d5dee00400d67ebbf4a MISC:https://git.kernel.org/stable/c/c5deb27895e017a0267de0a20d140ad5fcc55a54 URL:https://git.kernel.org/stable/c/c5deb27895e017a0267de0a20d140ad5fcc55a54
Assigning CNA
kernel.org
Date Record Created
20250618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)