Critical Vulnerability in Linux Kernel: btrfs Device Matching Issue
Summary
CVE-2022-49849: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix match incorrectly in dev_args_match_device syzkaller found a failed assertion: assertion failed: (args->devid != (u64)-1) || args->missing, i... Affects linux versions < 6.0.10-1. Fixed in 6.0.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports various file systems, including btrfs, which is known for its advanced features like snapshots and dynamic volume management. However, a recent vulnerability has been identified in the btrfs subsystem, which could lead to incorrect device matching, potentially compromising system integrity.
Vulnerability Detail
In the Linux kernel, a vulnerability was discovered in the btrfs file system related to device matching. The issue arises when the device ID (devid) is set to (u64)-1 via ioctl, leading to a failed assertion in the code. This failure allows for incorrect device matching, which could result in unintended consequences, such as data corruption or system instability. The vulnerability was identified by syzkaller and is documented in the source code at fs/btrfs/volumes.c:6921. The patch introduced in version 6.0.10-1 addresses this issue by refining the matching logic based on the args->missing value.
How To Fix
Minimum fixed version
6.0.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
The CVE-2022-49849 vulnerability in the Linux kernel's btrfs file system poses a significant risk due to incorrect device matching. It is crucial for users to update their systems to the patched version (6.0.10-1) to mitigate potential risks. Monitoring tools like Vulert can assist in identifying vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49849 is a vulnerability in the Linux kernel's btrfs file system that allows for incorrect device matching, potentially leading to system instability.
You can use Vulert, a tool that monitors open-source vulnerabilities in real-time, to check if your application is affected by this vulnerability. Visit Vulert Scanner for more information.
While there are no specific workarounds available, it is advisable to monitor your system closely for any unusual behavior until the patch can be applied.
Failing to address this vulnerability could lead to data corruption, system crashes, or unauthorized access to system resources due to incorrect device matching.
Detailed information about CVE-2022-49849 can be found in the official CVE database and through the Linux kernel's release notes.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
