- Vulnerability/
- CVE-2022-49912
CVE-2022-49912: btrfs: fix ulist leaks in error paths of qgroup self tests
First published: Thu May 01 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ulist leaks in error paths of qgroup self tests In the test_no_shared_qgroup() and test_multiple_refs() qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from the test function without freeing the "old_roots" ulist that was allocated by the previous calls to btrfs_find_all_roots(). Fix that by calling ulist_free() before returning.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/d81370396025cf63a7a1b5f8bb25a3479203b2ca
- https://git.kernel.org/stable/c/3f58283d83a588ff5da62fc150de19e798ed2ec2
- https://git.kernel.org/stable/c/203204798831c35d855ecc6417d98267d2d2184b
- https://git.kernel.org/stable/c/5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9
- https://git.kernel.org/stable/c/0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84
- https://git.kernel.org/stable/c/f46ea5fa3320dca4fe0c0926b49a5f14cb85de62
- https://git.kernel.org/stable/c/da7003434bcab0ae9aba3f2c003e734cae093326
- https://git.kernel.org/stable/c/d37de92b38932d40e4a251e876cc388f9aee5f42
Frequently Asked Questions
What is the severity of CVE-2022-49912?
CVE-2022-49912 has a medium severity rating that may lead to information leaks under specific conditions.
How do I fix CVE-2022-49912?
To fix CVE-2022-49912, update to the latest stable version of the Linux kernel that includes the relevant patches.
What software is affected by CVE-2022-49912?
CVE-2022-49912 affects the Linux kernel, specifically concerning the btrfs file system.
What are the potential impacts of CVE-2022-49912?
The potential impacts of CVE-2022-49912 include information leakage due to improper error handling in the btrfs qgroup tests.
When was CVE-2022-49912 reported?
CVE-2022-49912 was reported in 2022, as part of ongoing vulnerability assessments for the Linux kernel.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/linux
- canonical/linux kernel