CVE-2022-49407

설명

In the Linux kernel, the following vulnerability has been resolved: dlm: fix plock invalid read This patch fixes an invalid read showed by KASAN. A unlock will allocate a "struct plock_op" and a followed send_op() will append it to a global send_list data structure. In some cases a followed dev_read() moves it to recv_list and dev_write() will cast it to "struct plock_xop" and access fields which are only available in those structures. At this point an invalid read happens by accessing those fields. To fix this issue the "callback" field is moved to "struct plock_op" to indicate that a cast...

영향 제품·버전

제품 Linux Linux, linux kernel

영향 버전 Linux Linux, linux kernel >= 586759f03e2e9031ac5589912a51a909ed53c30a < 2c55155cc365861044d9e6e80e342693e8805e33, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 72f2f68970f9bdc252d59e119b385a6441b0b155, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 5a1765adf9855cf0f6d3f7e0eb4b78ca66f70dee, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 49cd9eb7b9a7b88124b31e31f8e539acaf1b3a6d, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 899bc4429174861122f0c236588700a4710c1fec, >= 586759f03e2e9031ac5589912a51a909ed53c30a < acdad5bc9827922ec2f2e84fd198718aa8e8ab92, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 56aa8d1fbd02357f3bf81bdfba1cde87ce8402fc, >= 586759f03e2e9031ac5589912a51a909ed53c30a < e421872fa17542cf33747071fb141b0130ce9ef7, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 42252d0d2aa9b94d168241710a761588b3959019, >= 2.6.22, >= 2.6.22 < 4.9.318, >= 4.10 < 4.14.283, >= 4.15 < 4.19.247, >= 4.20 < 5.4.198, >= 5.5 < 5.10.121, >= 5.11 < 5.15.46, >= 5.16 < 5.17.14, >= 5.18 < 5.18.3

수정 버전 Linux Linux, linux kernel 4.9.318, 4.14.283, 4.19.247, 5.4.198, 5.10.121, 5.15.46, 5.17.14, 5.18.3

기술 정보

CVSS 벡터 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE CWE-125