Tracker / CVE-2022-49413
CVE-2022-49413
High 7.8
In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a different cgroup (or in case of writeback just starts submitting bios associated with a different cgroup) bfq_merge_bio() can operate with stale cgroup information in bic. Thus the bio can be merged to a request from a different cgroup or it can result in merging of bfqqs for different cgroups or bfqqs of already dead cgroups and causing possible use-after-free issues. Fix the problem by updating cgroup information in bfq_merge_bio().
Affected products and versions
| linux | linux_kernel · 4.12 → 5.4.198 |
|---|---|
| linux | linux_kernel · 5.11 → 5.15.46 |
| linux | linux_kernel · 5.16 → 5.17.14 |
| linux | linux_kernel · 5.18 → 5.18.3 |
| linux | linux_kernel · 5.5 → 5.10.121 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.