QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-49852

Back to search

CVE-2022-49852

Published: May 1, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: process: fix kernel info leakage thread_struct's s[12] may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s[12] array in thread_struct when fork. As for kthread case, it's better to clear the s[12] array as well.

VendorProductVersions

Linux

Linux

affected
7db91e57a0acde126a162ababfb1e0ab190130cb - < c4601d30f7d989b4f354df899ab85b5f7a750d30
affected
7db91e57a0acde126a162ababfb1e0ab190130cb - < c5c0b3167537793a7cf936fb240366eefd2fc7fb
affected
7db91e57a0acde126a162ababfb1e0ab190130cb - < e56d18a976dda653194218df6d40d8122c775712
affected
7db91e57a0acde126a162ababfb1e0ab190130cb - < cc36c7fa5d9384602529ba3eea8c5daee7be4dbc
affected
7db91e57a0acde126a162ababfb1e0ab190130cb - < 358a68f98304b40b201ba5afe94c20355aa3dc68

+1 more versions

Linux

Linux

affected
4.15
unaffected
0 - < 4.15
unaffected
4.19.267 - <= 4.19.*
unaffected
5.4.225 - <= 5.4.*
unaffected
5.10.155 - <= 5.10.*

+3 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now