Buffer Copy Overflow Vulnerability in Linux Kernel - CVE-2022-49464
Summary
CVE-2022-49464: In the Linux kernel, the following vulnerability has been resolved: erofs: fix buffer copy overflow of ztailpacking feature I got some KASAN report as below: [ 46.959738] =================================================... Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and security features. However, vulnerabilities can arise, such as CVE-2022-49464, which affects the erofs (Enhanced Read-Only File System) and its ztailpacking feature, potentially leading to serious security risks.
Vulnerability Detail
CVE-2022-49464 is a use-after-free vulnerability in the Linux kernel's z_erofs_shifted_transform function. It occurs when the tail pcluster does not constitute a complete filesystem block, causing the second part of an uncompressed tail pcluster to be improperly handled. This can lead to a buffer copy overflow, allowing an attacker to exploit the vulnerability and potentially execute arbitrary code or crash the system. The issue was identified through KASAN reports, highlighting the risks associated with the ztailpacking feature.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider disabling the ztailpacking feature if it is not critical for your operations. This can be done by modifying the filesystem options or avoiding the use of the erofs filesystem until the system is updated.
Conclusion
CVE-2022-49464 is a critical vulnerability in the Linux kernel that poses significant risks if left unaddressed. It is essential to update to the latest patched version to protect your systems. Utilizing tools like Vulert can help monitor and alert you to such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49464 is a vulnerability in the Linux kernel that can lead to a buffer copy overflow due to improper handling of the ztailpacking feature.
You can use Vulert, which monitors open-source vulnerabilities in your software. Simply upload your manifest file like package-lock.json to check for vulnerabilities.
Exploitation of this vulnerability could allow attackers to execute arbitrary code or crash the system, leading to data loss or unauthorized access.
Yes, the vulnerability has been patched in version 5.18.5-1 of the Linux package. Updating to this version will mitigate the risk.
You can use tools like Vulert to receive real-time alerts for open-source vulnerabilities in your software, ensuring you are always informed.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
