CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled
blk-throttle: Set BIOTHROTTLED when bio has been throttled
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.200.1-1 - Configuration
To fix the blk_throtl_bio use-after-free, set BIO_THROTTLED under queue_lock (instead of setting it in the timer/work path after bio has been freed/completed). This addresses the reported issue where BIO_THROTTLED is set when bio has been throttled and can cause a use-after-free after __blk_throtl_bio().
Linux kernel block throttling (blk-throttle) BIO_THROTTLED flag assignment synchronization = Move BIO_THROTTLED set into queue_lock
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49465?
CVE-2022-49465 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2022-49465?
To fix CVE-2022-49465, you should upgrade your Linux kernel to version 5.18.3 or later.
Which versions of the Linux kernel are affected by CVE-2022-49465?
CVE-2022-49465 affects versions of the Linux kernel prior to 5.18.3 and those between versions 5.17.14 and 5.18.
What are the potential impacts of CVE-2022-49465?
The potential impacts of CVE-2022-49465 include improper throttling of block I/O operations which may affect system performance.
Is there a known exploit for CVE-2022-49465?
As of now, there are no publicly known exploits targeting CVE-2022-49465.