CVE-2022-41222: mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is...

Security readout for executives and security teams

CVE-2022-41222 is a Linux kernel memory-management flaw fixed before kernel 5.13.3. A local low-privileged user could potentially trigger a use-after-free condition with severe confidentiality, integrity, and availability impact, but the published CVSS vector rates exploitation complexity as high. Systems running Linux kernels before the fixed 5.13.3 lineage, or downstream/vendor kernels without the equivalent fix, are the main exposure. Risk is higher on shared servers, container hosts, developer workstations, and appliances where untrusted local users or workloads can execute code. Patch on a normal high-priority kernel maintenance path, with faster handling for shared infrastructure. This is not presented as remotely exploitable or known actively exploited in the provided sources, but successful local exploitation could have severe business impact. Mitigation focus: Upgrade to Linux kernel 5.13.3 or a vendor kernel containing the equivalent fix.; Apply distribution security updates, such as relevant Debian LTS kernel updates where applicable.; Check appliance and storage vendor advisories before assuming bundled kernels are patched..

Prepared

May 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.