CVE-2022-49413
26.02.2025, 07:01
In the Linux kernel, the following vulnerability has been resolved: bfq: Update cgroup information before merging bio When the process is migrated to a different cgroup (or in case of writeback just starts submitting bios associated with a different cgroup) bfq_merge_bio() can operate with stale cgroup information in bic. Thus the bio can be merged to a request from a different cgroup or it can result in merging of bfqqs for different cgroups or bfqqs of already dead cgroups and causing possible use-after-free issues. Fix the problem by updating cgroup information in bfq_merge_bio().Enginsight
Vendor | Product | Version |
---|---|---|
linux | linux_kernel | 4.12 ≤ 𝑥 < 5.4.198 |
linux | linux_kernel | 5.5 ≤ 𝑥 < 5.10.121 |
linux | linux_kernel | 5.11 ≤ 𝑥 < 5.15.46 |
linux | linux_kernel | 5.16 ≤ 𝑥 < 5.17.14 |
linux | linux_kernel | 5.18 ≤ 𝑥 < 5.18.3 |
𝑥
= Vulnerable software versions

Debian Releases
Common Weakness Enumeration
References