NFS File Corruption Risk in Linux Kernel - CVE-2022-49655
Summary
CVE-2022-49655: In the Linux kernel, the following vulnerability has been resolved: fscache: Fix invalidation/lookup race If an NFS file is opened for writing and closed, fscache_invalidate() will be asked to invalidate the file - howev... Affects linux versions < 5.18.14-1. Fixed in 5.18.14-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system, including file management, process scheduling, and memory management. The kernel's fscache subsystem is designed to cache file data for network file systems like NFS, improving performance by reducing the need for repeated network access. However, vulnerabilities in this subsystem can lead to severe issues, such as data corruption.
Vulnerability Detail
CVE-2022-49655 is a vulnerability in the Linux kernel's fscache subsystem that arises when an NFS file is opened for writing and then closed. During this process, if the fscache cookie is in the LOOKING_UP or CREATING state, the request to invalidate the file does not get recorded, leading to a race condition. This can result in the cache contents not being updated, potentially corrupting the NFS file if it is modified locally and then read. The vulnerability stems from improper state management within the fscache system, which fails to handle invalidation requests correctly under certain conditions.
How To Fix
Minimum fixed version
5.18.14-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk of file corruption.
Conclusion
CVE-2022-49655 is a critical vulnerability in the Linux kernel's fscache subsystem that can lead to NFS file corruption. Users are strongly advised to update their kernel to the patched version to mitigate this risk. Monitoring tools like Vulert can help keep track of vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49655 is a vulnerability in the Linux kernel's fscache subsystem that can lead to NFS file corruption due to improper handling of file invalidation requests.
If your system uses NFS and the Linux kernel is vulnerable, there is a risk of file corruption when files are modified locally and then read, as the cache may not be updated correctly.
You should update your Linux kernel to version 5.18.14-1 or later to fix the vulnerability and prevent potential data corruption.
Currently, there are no specific workarounds available. The best course of action is to apply the patch as soon as possible.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. It provides real-time alerts for any vulnerabilities detected.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
