← Database

CVE-2022-49426

HIGH CVSS: 7.8 Published: 2025-02-26 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-sva: Fix mm use-after-free We currently call arm64_mm_context_put() without holding a reference to the mm, which can result in use-after-free. Call mmgrab()/mmdrop() to ensure the mm only gets freed after we unpinned the ASID.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-416

References