CVE-2022-49057

Summary

In the Linux kernel, the following vulnerability has been resolved:

block: null_blk: end timed out poll request

When poll request is timed out, it is removed from the poll list, but not completed, so the request is leaked, and never get chance to complete.

Fix the issue by ending it in timeout handler.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0a593fbbc245a85940ed34caa3aa1e4cb060c54b < 407d09a22f3f685fd634aa5d05840c64b23bfebcaffected
LinuxLinux0a593fbbc245a85940ed34caa3aa1e4cb060c54b < 3e3876d322aef82416ecc496a4d4a587e0fdf7a3affected
LinuxLinux5.16affected
LinuxLinux0 < 5.16unaffected
LinuxLinux5.17.4 <= 5.17.*unaffected
LinuxLinux5.18 <= *unaffected

Weaknesses

References