CVE-2022-49849: btrfs: fix match incorrectly in dev_args_match_device
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix match incorrectly in devargsmatchdevice
syzkaller found a failed assertion:
assertion failed: (args->devid != (u64)-1) || args->missing, in fs/btrfs/volumes.c:6921
This can be triggered when we set devid to (u64)-1 by ioctl. In this case, the match of devid will be skipped and the match of device may succeed incorrectly.
Patch 562d7b1512f7 introduced this function which is used to match device. This function contains two matching scenarios, we can distinguish them by checking the value of args->missing rather than check whether args->devid and args->uuid is default value.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49849?
CVE-2022-49849 has a severity rating of medium, indicating a moderate risk to affected systems.
How do I fix CVE-2022-49849?
To fix CVE-2022-49849, update your Linux kernel to a patched version that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2022-49849?
CVE-2022-49849 affects Linux kernel versions between 5.15.54 and 5.15.79 as well as several 6.1 release candidates.
What impact does CVE-2022-49849 have on system security?
CVE-2022-49849 can potentially lead to system instability and could be exploited to cause a denial of service.
Is there a workaround for CVE-2022-49849?
Currently, there is no official workaround for CVE-2022-49849, so applying the patch is recommended.