Critical Vulnerability in Linux Kernel: XArray Misinterpretation Leading to Crashes
Summary
CVE-2022-49152: In the Linux kernel, the following vulnerability has been resolved: XArray: Fix xas_create_range() when multi-order entry present If there is already an entry present that is of order >= XA_CHUNK_SHIFT when we call xas_c... Affects linux versions < 5.17.3-1. Fixed in 5.17.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to software applications. It supports a wide range of functionalities, including process management, memory management, and device control. The vulnerability in question affects the XArray implementation within the kernel, specifically the xas_create_range() function, which can lead to system crashes under certain conditions.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the XArray implementation, particularly in the xas_create_range() function. This issue arises when an entry of order greater than or equal to XA_CHUNK_SHIFT is already present. When xas_create_range() is called, it misinterprets this entry as a node and attempts to dereference xa_node->parent, which can lead to a general protection fault. This fault typically manifests as a crash, often triggered by the khugepaged process hitting a race condition. The vulnerability has been present since the introduction of xas_create_range() but became more pronounced with the conversion of the page cache to multi-index entries.
How To Fix
Minimum fixed version
5.17.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The recommended action is to apply the patch by updating to the fixed version of the Linux package.
Conclusion
The CVE-2022-49152 vulnerability in the Linux kernel's XArray implementation poses a significant risk of system crashes due to misinterpretation of entries. Users are strongly encouraged to update their Linux packages to the patched version 5.17.3-1 or later to mitigate this risk. Regular monitoring and prompt updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49152 is a vulnerability in the Linux kernel's XArray implementation that can lead to system crashes due to misinterpretation of entries in the xas_create_range() function.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in your software. Visit Vulert Scanner to analyze your manifest file without needing to sign up.
The vulnerability can lead to general protection faults and system crashes, particularly affecting processes that interact with the XArray implementation.
Yes, a patch is available in version 5.17.3-1 of the Linux package. Users are advised to update to this version or later.
While there are no specific workarounds, it is crucial to monitor your system for any unusual behavior and plan to apply the update as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
