CVE-2022-49988

kernel: binder_alloc: add missing mmap_lock calls when using the VMA

Published Jun 18, 2025 CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed

Description

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No data.

No data available yet.

No remediation available yet

Source	ID	Title
EUVD	EUVD-2022-55267	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No CVSS v4.0

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2025061823-CVE-2022-49988-d597@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-49988
https://www.cve.org/CVERecord?id=CVE-2022-49988

History

Type	Values Removed	Values Added
Title		kernel: binder_alloc: add missing mmap_lock calls when using the VMA
References		https://lore.kernel.org/linux-cve-announce/2025061823-CVE-2022-49988-d597@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2022-49988 https://www.cve.org/CVERecord?id=CVE-2022-49988
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Type	Values Removed	Values Added
References	https://git.kernel.org/stable/c/44e602b4e52f70f04620bbbf4fe46ecb40170bde https://git.kernel.org/stable/c/577d9c05cc48c5242bcf719c06a5baf3105473ad https://git.kernel.org/stable/c/7b0163c1b07b7ff1717aa975821c40df98786ddc

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: binder_alloc: add missing mmap_lock calls when using the VMA Take the mmap_read_lock() when using the VMA in binder_alloc_print_pages() and when checking for a VMA in binder_alloc_new_buf_locked(). It is worth noting binder_alloc_new_buf_locked() drops the VMA read lock after it verifies a VMA exists, but may be taken again deeper in the call stack, if necessary.	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title	binder_alloc: add missing mmap_lock calls when using the VMA

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: binder_alloc: add missing mmap_lock calls when using the VMA Take the mmap_read_lock() when using the VMA in binder_alloc_print_pages() and when checking for a VMA in binder_alloc_new_buf_locked(). It is worth noting binder_alloc_new_buf_locked() drops the VMA read lock after it verifies a VMA exists, but may be taken again deeper in the call stack, if necessary.
Title		binder_alloc: add missing mmap_lock calls when using the VMA
References		https://git.kernel.org/stable/c/44e602b4e52f70f04620bbbf4fe46ecb40170bde https://git.kernel.org/stable/c/577d9c05cc48c5242bcf719c06a5baf3105473ad https://git.kernel.org/stable/c/7b0163c1b07b7ff1717aa975821c40df98786ddc