CVE-2022-49738

Summary

CVE-2022-49738 is a vulnerability affecting the Linux kernel's f2fs file system. A sanity check was missing on the i_extra_isize in the is_alive() function, causing access to an invalid address in the data_blkaddr path. This issue was discovered by syzbot and led to a kernel address error in gc_data_segment, is_alive, and data_blkaddr. The vulnerability was found in functions such as do_garbage_collect, f2fs_gc, f2fs_balance_fs, and write_inode, and it occurred during the writeback process. The root cause was identified as a failure to perform a sanity check on .i_extra_isize.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.