{"id":"CVE-2022-49828","summary":"hugetlbfs: don't delete error page from pagecache","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nhugetlbfs: don't delete error page from pagecache\n\nThis change is very similar to the change that was made for shmem [1], and\nit solves the same problem but for HugeTLBFS instead.\n\nCurrently, when poison is found in a HugeTLB page, the page is removed\nfrom the page cache.  That means that attempting to map or read that\nhugepage in the future will result in a new hugepage being allocated\ninstead of notifying the user that the page was poisoned.  As [1] states,\nthis is effectively memory corruption.\n\nThe fix is to leave the page in the page cache.  If the user attempts to\nuse a poisoned HugeTLB page with a syscall, the syscall will fail with\nEIO, the same error code that shmem uses.  For attempts to map the page,\nthe thread will get a BUS_MCEERR_AR SIGBUS.\n\n[1]: commit a76054266661 (\"mm: shmem: don't truncate page if memory failure happens\")","modified":"2026-08-12T03:51:47.595428900Z","published":"2025-05-01T14:09:47.443Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49828.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/30571f28bb35c826219971c63bcf60d2517112ed"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8625147cafaa9ba74713d682f5185eb62cb2aedb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ec667443b2dbc6cdbbac4073e51a17733158ec6a"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49828.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49828"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"78bb920344b8a6f04b79a7c254041723b931c94f"},{"fixed":"30571f28bb35c826219971c63bcf60d2517112ed"},{"fixed":"ec667443b2dbc6cdbbac4073e51a17733158ec6a"},{"fixed":"8625147cafaa9ba74713d682f5185eb62cb2aedb"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49828.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.0"},{"fixed":"5.15.80"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.0.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49828.json"}}],"schema_version":"1.9.0"}