CVE-2022-49168
Severity CVSS v4.0:
Pending analysis
Type:
CWE-416
Use After Free
Publication date:
26/02/2025
Last modified:
22/05/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
btrfs: do not clean up repair bio if submit fails<br />
<br />
The submit helper will always run bio_endio() on the bio if it fails to<br />
submit, so cleaning up the bio just leads to a variety of use-after-free<br />
and NULL pointer dereference bugs because we race with the endio<br />
function that is cleaning up the bio. Instead just return BLK_STS_OK as<br />
the repair function has to continue to process the rest of the pages,<br />
and the endio for the repair bio will do the appropriate cleanup for the<br />
page that it was given.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16.19 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.17 (including) | 5.17.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page