CVE-2022-50300: btrfs: fix extent map use-after-free when handling missing device in read_one_chunk
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix extent map use-after-free when handling missing device in readonechunk
Store the error code before freeing the extentmap. Though it's reference counted structure, in that function it's the first and last allocation so this would lead to a potential use-after-free.
The error can happen eg. when chunk is stored on a missing device and the degraded mount option is missing.
Bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216721
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50300?
CVE-2022-50300 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50300?
To fix CVE-2022-50300, update the Linux kernel to the latest stable version where the vulnerability has been patched.
What systems are affected by CVE-2022-50300?
CVE-2022-50300 specifically affects systems running the affected versions of the Linux kernel that utilize btrfs file system.
What type of vulnerability is CVE-2022-50300?
CVE-2022-50300 is a use-after-free vulnerability that can lead to potential memory corruption.
Is there a risk of exploitation with CVE-2022-50300?
Yes, there is a risk that CVE-2022-50300 could be exploited to execute arbitrary code or cause denial-of-service conditions.