IT

Tracker / CVE-2022-49688

CVE-2022-49688

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afs_getattr consult the server didn't account for the pseudo-inodes employed by the dynamic root-type afs superblock not having a volume or a server to access, and thus an oops occurs if such a directory is stat'd. Fix this by checking to see if the vnode->volume pointer actually points anywhere before following it in afs_getattr(). This can be tested by stat'ing a directory in /afs. It may be sufficient just to do "ls /afs" and the oops looks something like: BUG: kernel NULL pointer dereference, address: 0000000000000020 ... RIP: 0010:afs_getattr+0x8b/0x14b ... Call Trace: <TASK> vfs_statx+0x79/0xf5 vfs_fstatat+0x49/0x62

Affected products and versions

linux linux_kernel
linux linux_kernel · 4.19.245 → 4.19.250
linux linux_kernel · 5.10.118 → 5.10.127
linux linux_kernel · 5.15.42 → 5.15.51
linux linux_kernel · 5.17.10 → 5.18
linux linux_kernel · 5.18.1 → 5.18.8
linux linux_kernel · 5.4.196 → 5.4.202

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References