Inode Management Vulnerability in Linux Kernel: Cachefiles Package
Summary
CVE-2022-49064: In the Linux kernel, the following vulnerability has been resolved: cachefiles: unmark inode in use in error path Unmark inode in use if error encountered. Affects linux versions < 5.17.6-1. Fixed in 5.17.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system and applications. The Cachefiles feature allows the kernel to cache files on disk, improving performance by reducing the need to fetch data from remote sources. However, a vulnerability has been identified in the Cachefiles implementation that can lead to improper inode management, potentially causing system errors and degraded performance.
Vulnerability Detail
In the Linux kernel's Cachefiles, a vulnerability exists where the in-use flag for an inode may not be properly cleared in error paths. This can lead to situations where the system erroneously reports that an inode is already in use when it is not, causing operational issues. Specifically, if the in-use flag leakage occurs during the cachefiles_open_file() function, users will see an 'Inode already in use' error when attempting to access another cookie with the same index key. Similarly, if the leakage occurs in cachefiles_create_tmpfile(), the warning will not trigger, but the underlying issue remains, potentially leading to further complications.
How To Fix
Minimum fixed version
5.17.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The vulnerability identified in the Linux kernel's Cachefiles package poses a risk to inode management, potentially leading to system errors. It is crucial for users to update their systems to the patched version to mitigate this risk. Regular monitoring using tools like Vulert can help maintain awareness of such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to erroneous inode management, causing operational issues and degraded performance in systems using the Cachefiles feature.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Yes, a patch is available in version 5.17.6-1 of the Linux package. Updating to this version will resolve the vulnerability.
While there are no specific workarounds, it is recommended to monitor your system closely for any unusual behavior until you can apply the patch.
Detailed information can be found in the CVE database or through the official Linux kernel documentation.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
