CVE-2022-49168

btrfs: do not clean up repair bio if submit fails

High · published February 26, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: do not clean up repair bio if submit fails

The submit helper will always run bio_endio() on the bio if it fails to

submit, so cleaning up the bio just leads to a variety of use-after-free

and NULL pointer dereference bugs because we race with the endio

function that is cleaning up the bio. Instead just return BLK_STS_OK as

the repair function has to continue to process the rest of the pages,

and the endio for the repair bio will do the appropriate cleanup for the

page that it was given.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.7th percentile
Published
2025-02-26T01:55Z
EPSS history
Timeline
  • 26 FEB 01:55Z
    btrfs: do not clean up repair bio if submit fails
    cvelistv5