CVE-2022-49178: memstick/mspro_block: fix handling of read-only devices
In the Linux kernel, the following vulnerability has been resolved:
memstick/msproblock: fix handling of read-only devices
Use setdiskro to propagate the read-only state to the block layer instead of checking for it in ->open and leaking a reference in case of a read-only device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49178?
CVE-2022-49178 has a moderate severity level due to the potential impact on read-only device management in the Linux kernel.
How do I fix CVE-2022-49178?
To fix CVE-2022-49178, update the Linux kernel to version 5.17.2 or later, or apply the patches provided by your Linux distribution.
Which versions of the Linux kernel are affected by CVE-2022-49178?
CVE-2022-49178 affects Linux kernel versions prior to 5.17.2 and between versions 5.17 and 5.16.19.
What components are impacted by CVE-2022-49178?
CVE-2022-49178 impacts the memstick/mspro_block component in the Linux kernel.
Is CVE-2022-49178 publicly disclosed?
Yes, CVE-2022-49178 has been publicly disclosed as part of the Linux kernel vulnerability announcements.