<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugzilla.openanolis.cn/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.6"
          urlbase="https://bugzilla.openanolis.cn/"
          
          maintainer="service@openanolis.org"
>

    <bug>
          <bug_id>2214</bug_id>
          
          <creation_ts>2022-09-19 16:35:15 +0000</creation_ts>
          <short_desc>修复CVE漏洞</short_desc>
          <delta_ts>2023-10-24 15:40:49 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>5</classification_id>
          <classification>ANCK</classification>
          <product>ANCK 4.19 Dev</product>
          <component>mm</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P3-Medium</priority>
          <bug_severity>S3-normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="tangbinzy">tangbin_yewu</reporter>
          <assigned_to name="KaihaoBai">carlo.bai</assigned_to>
          <cc>gavin.dg</cc>
    
    
    <cc>mqaio</cc>
    
    
    <cc>yongchao</cc>
          
          <qa_contact name="shuming">qingming.su</qa_contact>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>7627</commentid>
    <comment_count>0</comment_count>
    <who name="tangbinzy">tangbin_yewu</who>
    <bug_when>2022-09-19 16:35:15 +0000</bug_when>
    <thetext>一、漏洞信息
漏洞编号：CVE-2022-39188
漏洞归属组件：kernel
漏洞归属的版本：4.19, 5.10
CVSS V3.0分值：
BaseScore：4.7 Medium
Vector：CVSS：3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
漏洞简述：
An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.
漏洞公开时间：2022-09-02 13:15
漏洞创建时间：2022-09-02 14:31:26
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2022-39188</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>7629</commentid>
    <comment_count>1</comment_count>
    <who name="tangbinzy">tangbin_yewu</who>
    <bug_when>2022-09-19 16:46:57 +0000</bug_when>
    <thetext>二 修复版本：
   from stable-v4.19.257
   https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/log/?h=linux-4.19.y
   https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-4.19.y&amp;id=c3b1e88f14e7f442e2ddcbec94527eec84ac0ca3</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>10994</commentid>
    <comment_count>2</comment_count>
    <who name="maqiao">mqaio</who>
    <bug_when>2022-12-05 11:38:20 +0000</bug_when>
    <thetext>merged: https://gitee.com/anolis/cloud-kernel/pulls/714</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>22953</commentid>
    <comment_count>3</comment_count>
    <who name="KaihaoBai">carlo.bai</who>
    <bug_when>2023-10-23 14:43:26 +0000</bug_when>
    <thetext>*** Bug 6960 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>22958</commentid>
    <comment_count>4</comment_count>
    <who name="KaihaoBai">carlo.bai</who>
    <bug_when>2023-10-23 14:46:06 +0000</bug_when>
    <thetext>*** Bug 6962 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>23072</commentid>
    <comment_count>5</comment_count>
    <who name="zl01087097">zl01087097</who>
    <bug_when>2023-10-24 15:40:49 +0000</bug_when>
    <thetext>*** Bug 6961 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>