U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2022-49077 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) If an mremap() syscall with old_size=0 ends up in move_page_tables(), it will call invalidate_range_start()/invalidate_range_end() unnecessarily, i.e. with an empty range. This causes a WARN in KVM's mmu_notifier. In the past, empty ranges have been diagnosed to be off-by-one bugs, hence the WARNing. Given the low (so far) number of unique reports, the benefits of detecting more buggy callers seem to outweigh the cost of having to fix cases such as this one, where userspace is doing something silly. In this particular case, an early return from move_page_tables() is enough to fix the issue.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/01e67e04c28170c47700c2c226d732bbfedb1ad0 kernel.org Patch 
https://git.kernel.org/stable/c/04bc13dae4a27b8d030843c85ae452bb2f1d9c1f kernel.org Patch 
https://git.kernel.org/stable/c/2358aa84ef6dafcf544a557caaa6b91afb4a0bd2 kernel.org Patch 
https://git.kernel.org/stable/c/7d659cb1763ff17d1c6ee082fa6feb4267c7a30b kernel.org Patch 
https://git.kernel.org/stable/c/a04cb99c5d4668fe3f5c0e5b6da1cecd34c3f219 kernel.org Patch 
https://git.kernel.org/stable/c/a05540f3903bd8295e8c4cd90dd3d416239a115b kernel.org Patch 
https://git.kernel.org/stable/c/c19d8de4e682ec4b0ea2b04a832cd8cc0be3bb31 kernel.org Patch 
https://git.kernel.org/stable/c/e2c328c2a8f9de8b761bd4025b66c63120c55761 kernel.org Patch 
https://git.kernel.org/stable/c/eeaf28e2a0128147d687237e59d5407ee1b14693 kernel.org Patch 

Weakness Enumeration

CWE-ID CWE Name Source
CWE-193 Off-by-one Error cwe source acceptance level NIST  

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

2 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2022-49077
NVD Published Date:
02/26/2025
NVD Last Modified:
10/14/2025
Source:
kernel.org