CVE-2022-49407

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: dlm: fix plock invalid read This patch fixes an invalid read showed by KASAN. A unlock will allocate a "struct plock_op" and a followed send_op() will append it to a global send_list data structure. In some cases a followed dev_read() moves it to recv_list and dev_write() will cast it to "struct plock_xop" and access fields which are only available in those structures. At this point an invalid read happens by accessing those fields. To fix this issue the "callback" field is moved to "struct plock_op" to indicate that a cast...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= 586759f03e2e9031ac5589912a51a909ed53c30a < 2c55155cc365861044d9e6e80e342693e8805e33, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 72f2f68970f9bdc252d59e119b385a6441b0b155, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 5a1765adf9855cf0f6d3f7e0eb4b78ca66f70dee, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 49cd9eb7b9a7b88124b31e31f8e539acaf1b3a6d, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 899bc4429174861122f0c236588700a4710c1fec, >= 586759f03e2e9031ac5589912a51a909ed53c30a < acdad5bc9827922ec2f2e84fd198718aa8e8ab92, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 56aa8d1fbd02357f3bf81bdfba1cde87ce8402fc, >= 586759f03e2e9031ac5589912a51a909ed53c30a < e421872fa17542cf33747071fb141b0130ce9ef7, >= 586759f03e2e9031ac5589912a51a909ed53c30a < 42252d0d2aa9b94d168241710a761588b3959019, >= 2.6.22, >= 2.6.22 < 4.9.318, >= 4.10 < 4.14.283, >= 4.15 < 4.19.247, >= 4.20 < 5.4.198, >= 5.5 < 5.10.121, >= 5.11 < 5.15.46, >= 5.16 < 5.17.14, >= 5.18 < 5.18.3

Fixed versions

4.9.318, 4.14.283, 4.19.247, 5.4.198, 5.10.121, 5.15.46, 5.17.14, 5.18.3

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-125