CVE-2022-48733

설명

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free after failure to create a snapshot At ioctl.c:create_snapshot(), we allocate a pending snapshot structure and then attach it to the transaction's list of pending snapshots. After that we call btrfs_commit_transaction(), and if that returns an error we jump to 'fail' label, where we kfree() the pending snapshot structure. This can result in a later use-after-free of the pending snapshot: 1) We allocated the pending snapshot and added it to the transaction's list of pending snapshots; 2) We call btrf...

영향 제품·버전

제품 Linux Linux, linux kernel

영향 버전 Linux Linux, linux kernel >= c37b2b6269ee4637fb7cdb5da0d1e47215d57ce2 < 7e4c72dbaf62f8978af8321a24dbd35566d3a78a, >= c37b2b6269ee4637fb7cdb5da0d1e47215d57ce2 < a7b717fa15165d3d9245614680bebc48a52ac05d, >= c37b2b6269ee4637fb7cdb5da0d1e47215d57ce2 < 9372fa1d73da5f1673921e365d0cd2c27ec7adc2, >= c37b2b6269ee4637fb7cdb5da0d1e47215d57ce2 < 28b21c558a3753171097193b6f6602a94169093a, >= 3.7, < 5.10.226, >= 5.11 < 5.15.22, >= 5.16 < 5.16.8, 5.17

수정 버전 Linux Linux, linux kernel 5.10.226, 5.15.22, 5.16.8

기술 정보

CVSS 벡터 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE CWE-416