Description: mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. Broken commit info: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7a3ef208e662f4b63d43a23f61a64a129c525bbc Bugfix commit info: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2555283eb40df89945557273121e9393ef9b542b https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=2fe3eee48899a890310177d54537d5b8e255eb31 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=c18a209b56e37b2a60414f714bd70b084ef25835 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=98f401d36396134c0c86e9e3bd00b6b6b028b521 https://github.com/torvalds/linux/commit/2555283eb40df89945557273121e9393ef9b542b https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=7877eaa1131147b4d6a063962f3aac0ab1b8ea1c https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=978a70601bdc4c32de4003d3beef4dfa23fff1e0 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=6dbfc25d68d922736381988d64156a649ccf7bf1 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=c24ca0f172905d593ad8ab276b0992bb74353a8d
此前已修复,errata已发，cve-center bug冲掉了评估结果，回补评估结果时重新创建的bugzilla *** This bug has been marked as a duplicate of bug 2491 ***