CVE-2022-49914

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2025
Last modified:
12/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> btrfs: fix inode list leak during backref walking at resolve_indirect_refs()<br /> <br /> During backref walking, at resolve_indirect_refs(), if we get an error<br /> we jump to the &amp;#39;out&amp;#39; label and call ulist_free() on the &amp;#39;parents&amp;#39; ulist,<br /> which frees all the elements in the ulist - however that does not free<br /> any inode lists that may be attached to elements, through the &amp;#39;aux&amp;#39; field<br /> of a ulist node, so we end up leaking lists if we have any attached to<br /> the unodes.<br /> <br /> Fix this by calling free_leaf_list() instead of ulist_free() when we exit<br /> from resolve_indirect_refs(). The static function free_leaf_list() is<br /> moved up for this to be possible and it&amp;#39;s slightly simplified by removing<br /> unnecessary code.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 3.5 (including) 4.14.299 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.15 (including) 4.19.265 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.224 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.154 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.78 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.0.8 (excluding)
cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*