Critical Btrfs Delalloc Vulnerability in Linux Kernel - CVE-2022-49068
Summary
CVE-2022-49068: In the Linux kernel, the following vulnerability has been resolved: btrfs: release correct delalloc amount in direct IO write path Running generic/406 causes the following WARNING in btrfs_destroy_inode() which tells the... Affects linux versions < 5.17.6-1. Fixed in 5.17.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services and managing hardware resources. It supports various filesystems, including Btrfs, which is known for its advanced features like snapshots and dynamic inode allocation. However, a vulnerability has been identified in the Btrfs filesystem related to the handling of delayed allocation (delalloc) during direct I/O operations, potentially leading to data integrity issues.
Vulnerability Detail
CVE-2022-49068 arises from improper management of outstanding extents in the Btrfs filesystem during direct I/O writes. Specifically, when the length of the allocated extents is modified in the Copy-On-Write (COW) case, the system may release fewer outstanding extents than expected. This inconsistency can trigger warnings and potentially lead to data corruption or loss, particularly when the filesystem is under heavy load or when short writes occur due to allocation failures.
How To Fix
Minimum fixed version
5.17.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workaround is provided for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any risks associated with this issue.
Conclusion
CVE-2022-49068 is a significant vulnerability affecting the Btrfs filesystem in the Linux kernel, which can lead to data integrity issues. Users are strongly advised to update their systems to the patched version to ensure protection against potential data loss or corruption.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49068 is a vulnerability in the Btrfs filesystem of the Linux kernel that can lead to improper handling of outstanding extents during direct I/O operations.
The vulnerability may result in data corruption or loss, especially under conditions of heavy filesystem load or when short writes occur.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit Vulert Scanner to check your application without needing to sign up.
Yes, a patch is available in the Linux kernel version 5.17.6-1 and later. Users should update their kernel to this version or newer.
While no specific workaround is available, it is crucial to monitor your system closely and apply the patch as soon as possible to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
