< Back

CVE-2022-49413

Updated on 26 Feb 2025

Severity

5.5 Medium severity

Details

CVSS score
5.5
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

bfq: Update cgroup information before merging bio

When the process is migrated to a different cgroup (or in case of writeback just starts submitting bios associated with a different cgroup) bfq_merge_bio() can operate with stale cgroup information in bic. Thus the bio can be merged to a request from a different cgroup or it can result in merging of bfqqs for different cgroups or bfqqs of already dead cgroups and causing possible use-after-free issues. Fix the problem by updating cgroup information in bfq_merge_bio().

Details

Affected product:
AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , Debian 10 ELS , Oracle Linux 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:
kernel @ 5.14.0 (+10 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Amazon Linux 2 Released
103 kernels
  • 4.14.152-127.182.amzn2
  • 4.14.154-128.181.amzn2
  • 4.14.165-131.185.amzn2
  • 4.14.146-120.181.amzn2
  • 4.14.152-124.171.amzn2
  • 4.14.171-136.231.amzn2
  • 4.14.158-129.185.amzn2
  • 4.14.165-133.209.amzn2
  • 4.14.173-137.228.amzn2
  • 4.14.177-139.254.amzn2
  • 4.14.173-137.229.amzn2
  • 4.14.177-139.253.amzn2
  • 4.14.181-140.257.amzn2
  • 4.14.186-146.268.amzn2
  • 4.14.181-142.260.amzn2
  • 4.14.192-147.314.amzn2
  • 4.14.193-149.317.amzn2
  • 4.14.198-152.320.amzn2
  • 4.14.200-155.322.amzn2
  • 4.14.203-156.332.amzn2
  • 4.14.209-160.335.amzn2
  • 4.14.214-160.339.amzn2
  • 4.14.209-160.339.amzn2
  • 4.14.219-161.340.amzn2
  • 4.14.225-168.357.amzn2
  • 4.14.231-173.360.amzn2
  • 4.14.219-164.354.amzn2
  • 4.14.225-169.362.amzn2
  • 4.14.232-176.381.amzn2
  • 4.14.232-177.418.amzn2
  • 4.14.238-182.421.amzn2
  • 4.14.238-182.422.amzn2
  • 4.14.231-173.361.amzn2
  • 4.14.241-184.433.amzn2
  • 4.14.243-185.433.amzn2
  • 4.14.246-187.474.amzn2
  • 4.14.248-189.473.amzn2
  • 4.14.252-195.481.amzn2
  • 4.14.252-195.483.amzn2
  • 4.14.256-197.484.amzn2
  • 4.14.262-200.489.amzn2
  • 4.14.268-205.500.amzn2
  • 4.14.273-207.502.amzn2
  • 4.14.275-207.503.amzn2
  • 4.14.276-211.499.amzn2
  • 4.14.281-212.502.amzn2
  • 4.14.285-215.501.amzn2
  • 4.14.287-215.504.amzn2
  • 4.14.290-217.505.amzn2
  • 4.14.291-218.527.amzn2
  • 4.14.294-220.533.amzn2
  • 4.14.296-222.539.amzn2
  • 4.14.299-223.520.amzn2
  • 4.14.301-224.520.amzn2
  • 4.14.304-226.531.amzn2
  • 4.14.301-225.528.amzn2
  • 4.14.309-231.529.amzn2
  • 4.14.305-227.531.amzn2
  • 4.14.313-235.533.amzn2
  • 4.14.314-237.533.amzn2
  • 4.14.314-238.539.amzn2
  • 4.14.318-240.529.amzn2
  • 4.14.318-241.531.amzn2
  • 4.14.320-242.534.amzn2
  • 4.14.320-243.544.amzn2
  • 4.14.322-244.536.amzn2
  • 4.14.311-233.529.amzn2
  • 4.14.322-244.539.amzn2
  • 4.14.326-245.539.amzn2
  • 4.14.327-246.539.amzn2
  • 4.14.328-248.540.amzn2
  • 4.14.322-246.539.amzn2
  • 4.14.330-250.540.amzn2
  • 4.14.334-252.552.amzn2
  • 4.14.336-253.554.amzn2
  • 4.14.336-255.557.amzn2
  • 4.14.336-256.559.amzn2
  • 4.14.336-257.562.amzn2
  • 4.14.336-256.557.amzn2
  • 4.14.336-257.568.amzn2
  • 4.14.336-257.566.amzn2
  • 4.14.343-261.564.amzn2
  • 4.14.343-259.562.amzn2
  • 4.14.343-260.564.amzn2
  • 4.14.348-265.562.amzn2
  • 4.14.344-262.563.amzn2
  • 4.14.345-262.561.amzn2
  • 4.14.348-265.565.amzn2
  • 4.14.349-266.564.amzn2
  • 4.14.350-266.564.amzn2
  • 4.14.352-268.568.amzn2
  • 4.14.352-267.564.amzn2
  • 4.14.353-270.569.amzn2
  • 4.14.352-268.569.amzn2
  • 4.14.355-271.569.amzn2
  • 4.14.355-275.582.amzn2
  • 4.14.355-275.570.amzn2
  • 4.14.355-275.572.amzn2
  • 4.14.355-275.591.amzn2
  • 4.14.355-275.603.amzn2
  • 4.14.355-276.618.amzn2
  • 4.14.355-276.639.amzn2
  • 4.14.355-274.598.amzn2
Amazon Linux 2 5.10 Will Not Fix —
Amazon Linux 2 5.4 Will Not Fix —
RHEL 9 Will Not Fix —
Ubuntu 18.04 AWS Focal Planned —
Ubuntu 20.04 Planned —
Ubuntu 22.04 Planned —
Ubuntu 22.04 AWS Planned —