CVE-2022-49710: dm mirror log: round up region bitmap size to BITS_PER_LONG
In the Linux kernel, the following vulnerability has been resolved:
dm mirror log: round up region bitmap size to BITSPERLONG
The code in dm-log rounds up bitsetsize to 32 bits. It then uses findnextzerobitle on the allocated region. findnextzerobitle accesses the bitmap using unsigned long pointers. So, on 64-bit architectures, it may access 4 bytes beyond the allocated size.
Fix this bug by rounding up bitsetsize to BITSPERLONG.
This bug was found by running the lvm2 testsuite with kasan.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49710?
CVE-2022-49710 has a medium severity rating due to its potential to impact system stability and data integrity.
How do I fix CVE-2022-49710?
To fix CVE-2022-49710, update your Linux kernel to the latest stable version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2022-49710?
CVE-2022-49710 affects various versions of the Linux kernel that utilize the dm-log functionality.
Is CVE-2022-49710 easy to exploit?
Exploitation of CVE-2022-49710 requires specific conditions and access, making it less likely for casual attackers.
What impact does CVE-2022-49710 have on Linux systems?
The impact of CVE-2022-49710 can lead to unexpected behavior such as incorrect data processing in systems utilizing the affected kernel components.