CVE-2022-49377: blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: don't touch ->tagset in blkmqgetsqhctx
blkmqrunhwqueues() could be run when there isn't queued request and after queue is cleaned up, at that time tagset is freed, because tagset lifetime is covered by driver, and often freed after blkcleanupqueue() returns.
So don't touch ->tagset for figuring out current default hctx by the mapping built in request queue, so use-after-free on tagset can be avoided. Meantime this way should be fast than retrieving mapping from tagset.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: don't touch ->tagset in blkmqgetsqhctx
blkmqrunhwqueues() could be run when there isn't queued request and after queue is cleaned up, at that time tagset is freed, because tagset lifetime is covered by driver, and often freed after blkcleanupqueue() returns.
So don't touch ->tagset for figuring out current default hctx by the mapping built in request queue, so use-after-free on tagset can be avoided. Meantime this way should be fast than retrieving mapping from tagset.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49377?
CVE-2022-49377 is classified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2022-49377?
To fix CVE-2022-49377, update your Linux kernel to a version that is at least 5.18.4 or later.
Which versions of the Linux kernel are affected by CVE-2022-49377?
CVE-2022-49377 affects Linux kernel versions between 5.12 and 5.15.47, as well as between 5.16 and 5.17.15.
What type of vulnerability is CVE-2022-49377?
CVE-2022-49377 is a vulnerability related to the blk-mq component in the Linux kernel.
Can CVE-2022-49377 lead to system crashes?
Yes, CVE-2022-49377 could potentially lead to system instability or crashes due to improper handling of the blk-mq tagset.