CVE-2022-49852: Linux Kernel

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: riscv: process: fix kernel info leakage thread_struct's s[12] may contain random kernel memory content, which may be finally leaked to userspace. This is a security hole. Fix it by clearing the s[12] array in thread_struct when fork. As for kthread case, it's better to clear the s[12] array as well.

Affected products

• Linux Linux Kernel: from 4.15, before 4.19.267 (fixed in 4.19.267); from 4.20, before 5.4.225 (fixed in 5.4.225); from 5.5, before 5.10.155 (fixed in 5.10.155); from 5.11, before 5.15.79 (fixed in 5.15.79); from 5.16, before 6.0.9 (fixed in 6.0.9); version 6.1 only

Published 2025-05-01. Last modified 2026-06-17.