CVE - CVE-2022-49361

CVE-ID
CVE-2022-49361	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check for inline inode Yanming reported a kernel bug in Bugzilla kernel [1], which can be reproduced. The bug message is: The kernel message is shown below: kernel BUG at fs/inode.c:611! Call Trace: evict+0x282/0x4e0 __dentry_kill+0x2b2/0x4d0 dput+0x2dd/0x720 do_renameat2+0x596/0x970 __x64_sys_rename+0x78/0x90 do_syscall_64+0x3b/0x90 [1] https://bugzilla.kernel.org/show_bug.cgi?id=215895 The bug is due to fuzzed inode has both inline_data and encrypted flags. During f2fs_evict_inode(), as the inode was deleted by rename(), it will cause inline data conversion due to conflicting flags. The page cache will be polluted and the panic will be triggered in clear_inode(). Try fixing the bug by doing more sanity checks for inline data inode in sanity_check_inode().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/11c1cd032df85df3c096a57a7f27d57819956e4a URL:https://git.kernel.org/stable/c/11c1cd032df85df3c096a57a7f27d57819956e4a MISC:https://git.kernel.org/stable/c/198fd9faa271dd54dca6fc8eb6873f42dfd3b4d8 URL:https://git.kernel.org/stable/c/198fd9faa271dd54dca6fc8eb6873f42dfd3b4d8 MISC:https://git.kernel.org/stable/c/677a82b44ebf263d4f9a0cfbd576a6ade797a07b URL:https://git.kernel.org/stable/c/677a82b44ebf263d4f9a0cfbd576a6ade797a07b MISC:https://git.kernel.org/stable/c/7cfe2d43becaf76e562b9617d2c2d9b445f86761 URL:https://git.kernel.org/stable/c/7cfe2d43becaf76e562b9617d2c2d9b445f86761 MISC:https://git.kernel.org/stable/c/efdefbe8b7564602ab446474788225a1f2a323b5 URL:https://git.kernel.org/stable/c/efdefbe8b7564602ab446474788225a1f2a323b5
Assigning CNA
kernel.org
Date Record Created
20250226	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250226)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)