CVE-2022-49912: btrfs: fix ulist leaks in error paths of qgroup self tests
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix ulist leaks in error paths of qgroup self tests
In the testnosharedqgroup() and testmultiplerefs() qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from the test function without freeing the "oldroots" ulist that was allocated by the previous calls to btrfsfindallroots(). Fix that by calling ulistfree() before returning.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49912?
CVE-2022-49912 has a medium severity rating that may lead to information leaks under specific conditions.
How do I fix CVE-2022-49912?
To fix CVE-2022-49912, update to the latest stable version of the Linux kernel that includes the relevant patches.
What software is affected by CVE-2022-49912?
CVE-2022-49912 affects the Linux kernel, specifically concerning the btrfs file system.
What are the potential impacts of CVE-2022-49912?
The potential impacts of CVE-2022-49912 include information leakage due to improper error handling in the btrfs qgroup tests.
When was CVE-2022-49912 reported?
CVE-2022-49912 was reported in 2022, as part of ongoing vulnerability assessments for the Linux kernel.