CVE-2022-49531: loop: implement ->free_disk
In the Linux kernel, the following vulnerability has been resolved:
loop: implement ->freedisk
Ensure that the lodevice which is stored in the gendisk private data is valid until the gendisk is freed. Currently the loop driver uses a lot of effort to make sure a device is not freed when it is still in use, but to to fix a potential deadlock this will be relaxed a bit soon.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
Exploitation requires local access and low privileges. No user interaction is required, and successful exploitation can affect confidentiality, integrity, and availability.
Which products are identified as affected?
The affected software listed is the Linux kernel and Microsoft cbl2 kernel 5.15.186.1-1.
What is the relevant mitigation if an update cannot be applied immediately?
No workaround or configuration-based mitigation is provided in the available data. Prioritize applying the vendor fix referenced for the affected kernel.