{
  "cveId": "CVE-2022-48897",
  "url": "https://patchblox.com/security/cve/CVE-2022-48897",
  "summary": "CVE-2022-48897 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48897, released August 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64/mm: fix incorrect file_map_count for inval...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  arm64/mm: fix incorrect file_map_count for invalid pmd  The page table check trigger BUG_ON() unexpectedly when split hugepage:   ------------[ cut here ]------------  kernel BUG at mm/page_table_check.c:119!  Internal error: Oops - BUG: 00000000f2000800 [#1] SMP  Dumping ftrace buffer:     (ftrace buffer empty)  Modules linked in:  CPU: 7 PID: 210 Comm: transhuge-stres Not tainted 6.1.0-rc3\u002B #748  Hardware name: linux,dummy-virt (DT)  pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)  pc : page_table_check_set.isra.0\u002B0x398/0x468  lr : page_table_check_set.isra.0\u002B0x1c0/0x468 [...]  Call trace:   page_table_check_set.isra.0\u002B0x398/0x468   __page_table_check_pte_set\u002B0x160/0x1c0   __split_huge_pmd_locked\u002B0x900/0x1648   __split_huge_pmd\u002B0x28c/0x3b8   unmap_page_range\u002B0x428/0x858   unmap_single_vma\u002B0xf4/0x1c8   zap_page_range\u002B0x2b0/0x410   madvise_vma_behavior\u002B0xc44/0xe78   do_madvise\u002B0x280/0x698   __arm64_sys_madvise\u002B0x90/0xe8   invoke_syscall.constprop.0\u002B0xdc/0x1d8   do_el0_svc\u002B0xf4/0x3f8   el0_svc\u002B0x58/0x120   el0t_64_sync_handler\u002B0xb8/0xc0   el0t_64_sync\u002B0x19c/0x1a0 [...]  On arm64, pmd_leaf() will return true even if the pmd is invalid due to pmd_present_invalid() check. So in pmdp_invalidate() the file_map_count will not only decrease once but also increase once. Then in set_pte_at(), the file_map_count increase again, and so trigger BUG_ON() unexpectedly.  Add !pmd_present_invalid() check in pmd_user_accessible_page() to fix the problem.",
  "published": "2024-08-21T07:15:05Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00205,
  "epssPercentile": 0.10548,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.7-1",
      "fix": "DEBIAN-CVE-2022-48897",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48897",
      "released": "2024-08-21T07:15:05Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.7-1",
      "fix": "DEBIAN-CVE-2022-48897",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48897",
      "released": "2024-08-21T07:15:05Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.7-1",
      "fix": "DEBIAN-CVE-2022-48897",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48897",
      "released": "2024-08-21T07:15:05Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}