CVE-2022-49168

Summary

CVE-2022-49168 is a vulnerability affecting the Linux kernel's btrfs file system. The issue arises from the inappropriate cleanup of repair BIO (Buffered I/O) in case of submit failure. The submit helper function will always run bio_endio() on the bio if it fails to submit, leading to use-after-free and NULL pointer dereference bugs due to racing with the endio function that is cleaning up the bio. Instead, the repair function should return BLK_STS_OK, allowing the endio function for the repair bio to handle the appropriate cleanup.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.