CVE-2022-39188

An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.

• CWE-362

• https://bugs.chromium.org/p/project-zero/issues/detail?id=2329Issue Tracking, Patch, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19Patch, Release Notes, Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b67fbebd4cf980aecbcc750e1462128bffe8ae15Patch, Vendor Advisory
• https://github.com/torvalds/linux/commit/b67fbebd4cf980aecbcc750e1462128bffe8ae15Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lore.kernel.org/stable/CAG48ez3SEqOPcPCYGHVZv4iqEApujD5VtM3Re-tCKLDEFdEdbg%40mail.gmail.com/
• https://www.debian.org/security/2022/dsa-5257Third Party Advisory
• https://bugs.chromium.org/p/project-zero/issues/detail?id=2329Issue Tracking, Patch, Third Party Advisory
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19Patch, Release Notes, Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b67fbebd4cf980aecbcc750e1462128bffe8ae15Patch, Vendor Advisory
• https://github.com/torvalds/linux/commit/b67fbebd4cf980aecbcc750e1462128bffe8ae15Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/10/msg00000.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/11/msg00001.htmlMailing List, Third Party Advisory
• https://lore.kernel.org/stable/CAG48ez3SEqOPcPCYGHVZv4iqEApujD5VtM3Re-tCKLDEFdEdbg%40mail.gmail.com/
• https://www.debian.org/security/2022/dsa-5257Third Party Advisory

Published

Sep 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39182H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Ver…8.8
• CVE-2022-39183Moodle Plugin - SAML Auth may allow Open Redirect through un…6.1
• CVE-2022-39184EXFO - BV-10 Performance Endpoint Unit authentication bypass…9.8
• CVE-2022-39185EXFO - BV-10 Performance Endpoint Unit Undocumented privileg…9.8
• CVE-2022-39186EXFO - BV-10 Performance Endpoint Unit misconfiguration. Sys…5.5
• CVE-2022-39187Rumpus - FTP server version 9.0.7.1 has a Reflected cross-si…6.1
• CVE-2022-39189An issue was discovered the x86 KVM subsystem in the Linux k…7.8
• CVE-2022-3919The Jetpack CRM WordPress plugin before 5.4.3 does not sanit…4.8
• CVE-2022-39190An issue was discovered in net/netfilter/nf_tables_api.c in …5.5
• CVE-2022-39193An issue was discovered in the CheckUser extension for Media…5.3
• CVE-2022-39194An issue was discovered in the MediaWiki through 1.38.2. The…4.9
• CVE-2022-39195A cross-site scripting (XSS) vulnerability in the LISTSERV 1…6.1