CVE-2022-49081
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2022-49081 affects the Linux kernel's highmem subsystem, specifically in the _kmaplocalsched{in,out} functions. The vulnerability was discovered when CONFIGDEBUGKMAPLOCAL is enabled, where the checks for unmapped slots in tsk->kmapctrl.pteval were incorrectly implemented (Kernel Git).

Technical details

The vulnerability stems from a mismatch between initialization and verification methods. The slots are initialized with 0 value, but the check is performed using ptenone() instead of checking the actual value. This becomes problematic because a 0 PTE doesn't necessarily mean ptenone() will return true, particularly on architectures like xtensa where it returns false (Debian Tracker).

Impact

When triggered, the vulnerability results in runtime warnings and potential system instability. The issue manifests through warning messages in the kernel log, particularly affecting systems with CONFIGDEBUGKMAP_LOCAL enabled (Ubuntu Security).

Mitigation and workarounds

The fix involves replacing !ptenone(pteval) with pteval(pteval) != 0 in the affected code. This patch has been merged into the mainline kernel and backported to stable versions. Various distributions have released updated kernel packages incorporating this fix (Debian Tracker).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40258HIGH7
  • Linux KernelLinux Kernel
  • kernel-zfcpdump-devel-matched
NoNoDec 04, 2025
CVE-2025-40259MEDIUM6.2
  • Linux KernelLinux Kernel
  • kernel-64k-devel
NoNoDec 04, 2025
CVE-2025-40264MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-rt-64k-debug-kvm
NoNoDec 04, 2025
CVE-2025-40254MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-modules-partner
NoNoDec 04, 2025
CVE-2025-40253MEDIUM5.5
  • Linux KernelLinux Kernel
  • python3-perf
NoNoDec 04, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management