01 Record

CVE-2022-49554

zsmalloc: fix races between asynchronous zspage free and page migration

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

zsmalloc: fix races between asynchronous zspage free and page migration

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 12.2% of scored records. A rank, not a probability.
NVD base score: 4.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-08-04.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-26 02:14Z1 YR AGO

Last updated

2026-08-05 08:55Z1 MO AGO

Reserved

2025-02-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class

Data version

5.2

Document digest

7ff475d18da825852628dcecb09653f5457cb8b85a1a0b3770372a150c0096e1

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux77ff465799c60294e248000cd22ae8171da3304c to < 3674d8a8dadd03a447dd21069d4dacfc3399b63b, 77ff465799c60294e248000cd22ae8171da3304c to < 645996efc2ae391246d595832aaa6f9d3cc338c7, 77ff465799c60294e248000cd22ae8171da3304c to < fc658c083904427abbf8f18280d517ee2668677c, 77ff465799c60294e248000cd22ae8171da3304c to < fae05b2314b147a78fbed1dc4c645d9a66313758, 77ff465799c60294e248000cd22ae8171da3304c to < 3ec459c8810e658401be428d3168eacfc380bdd0, 77ff465799c60294e248000cd22ae8171da3304c to < 8ba7b7c1dad1f6503c541778f31b33f7f62eb966, 77ff465799c60294e248000cd22ae8171da3304c to < c5402fb5f71f1a725f1e55d9c6799c0c7bec308f, 77ff465799c60294e248000cd22ae8171da3304c to < 2505a981114dcb715f8977b8433f7540854851d8, 4.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/3674d8a8dadd03a447dd21069d4dacfc3399b63b
git.kernel.orghttps://git.kernel.org/stable/c/645996efc2ae391246d595832aaa6f9d3cc338c7
git.kernel.orghttps://git.kernel.org/stable/c/fc658c083904427abbf8f18280d517ee2668677c
git.kernel.orghttps://git.kernel.org/stable/c/fae05b2314b147a78fbed1dc4c645d9a66313758
git.kernel.orghttps://git.kernel.org/stable/c/3ec459c8810e658401be428d3168eacfc380bdd0
git.kernel.orghttps://git.kernel.org/stable/c/8ba7b7c1dad1f6503c541778f31b33f7f62eb966
git.kernel.orghttps://git.kernel.org/stable/c/c5402fb5f71f1a725f1e55d9c6799c0c7bec308f
git.kernel.orghttps://git.kernel.org/stable/c/2505a981114dcb715f8977b8433f7540854851d8

01 Record index

CVE-2022-49554

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2022-49554

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References