Critical NULL Pointer Dereference in Linux Kernel - CVE-2022-49699
Summary
CVE-2022-49699: In the Linux kernel, the following vulnerability has been resolved: filemap: Handle sibling entries in filemap_get_read_batch() If a read races with an invalidation followed by another read, it is possible for a folio to... Affects linux versions < 5.18.14-1. Fixed in 5.18.14-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to software applications. It is known for its stability, performance, and security features. However, like any complex software, it is susceptible to vulnerabilities that can compromise system integrity and security. CVE-2022-49699 highlights a specific issue within the filemap functionality of the kernel, which can lead to serious consequences if not addressed.
Vulnerability Detail
CVE-2022-49699 is a vulnerability in the Linux kernel that arises from a race condition during read operations. When a read operation occurs simultaneously with an invalidation followed by another read, it can result in a folio being replaced with a higher-order folio. This situation may lead to a NULL pointer dereference while holding the RCU read lock, potentially causing system crashes or instability. The vulnerability is particularly concerning as it can be exploited under specific conditions, making it a critical issue for affected systems.
How To Fix
Minimum fixed version
5.18.14-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
CVE-2022-49699 is a critical vulnerability in the Linux kernel that can lead to serious system issues if not addressed. Users are strongly advised to update their systems to the patched version to ensure security and stability. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the integrity of your software.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49699 is a vulnerability in the Linux kernel that can lead to a NULL pointer dereference due to a race condition during read operations.
If exploited, this vulnerability can cause system crashes or instability, affecting the overall performance and reliability of your operating system.
If you are using Debian 12 or Debian 13 with a kernel version prior to 5.18.14-1, your system is vulnerable to CVE-2022-49699.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Check your application against CVE-2022-49699 using the Vulert playground at Vulert Scanner.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to the patched version as soon as possible to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
