CVE - CVE-2022-49044

CVE-ID
CVE-2022-49044	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: dm integrity: fix memory corruption when tag_size is less than digest size It is possible to set up dm-integrity in such a way that the "tag_size" parameter is less than the actual digest size. In this situation, a part of the digest beyond tag_size is ignored. In this case, dm-integrity would write beyond the end of the ic->recalc_tags array and corrupt memory. The corruption happened in integrity_recalc->integrity_sector_checksum->crypto_shash_final. Fix this corruption by increasing the tags array so that it has enough padding at the end to accomodate the loop in integrity_recalc() being able to write a full digest size for the last member of the tags array.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/08c1af8f1c13bbf210f1760132f4df24d0ed46d6 URL:https://git.kernel.org/stable/c/08c1af8f1c13bbf210f1760132f4df24d0ed46d6 MISC:https://git.kernel.org/stable/c/4d485cf9b609709e45d5113e6e2b1b01254b2fe9 URL:https://git.kernel.org/stable/c/4d485cf9b609709e45d5113e6e2b1b01254b2fe9 MISC:https://git.kernel.org/stable/c/6a95d91c0b315c965198f6ab7dec7c94129e17e0 URL:https://git.kernel.org/stable/c/6a95d91c0b315c965198f6ab7dec7c94129e17e0 MISC:https://git.kernel.org/stable/c/6b4bf97587ef6c1927a78934b700204920655123 URL:https://git.kernel.org/stable/c/6b4bf97587ef6c1927a78934b700204920655123 MISC:https://git.kernel.org/stable/c/7f84c937222944c03f4615ca4742df6bed0e5adf URL:https://git.kernel.org/stable/c/7f84c937222944c03f4615ca4742df6bed0e5adf MISC:https://git.kernel.org/stable/c/cd02b2687d66f0a8e716384de4b9a0671331f1dc URL:https://git.kernel.org/stable/c/cd02b2687d66f0a8e716384de4b9a0671331f1dc
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)