CVE-2022-49384

Summary

In the Linux kernel, the following vulnerability has been resolved:

md: fix double free of io_acct_set bioset

Now io_acct_set is alloc and free in personality. Remove the codes that free io_acct_set in md_free and md_stop.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux00e3d58f50a875343124bcf5a9637520a492b0d1 < 36a2fc44c574a59ee3b5e2cb327182f227b2b07eaffected
LinuxLinux0c031fd37f69deb0cd8c43bbfcfccd62ebd7e952 < f99d5b5dc8a42c807b5f1176b925aa45d61962abaffected
LinuxLinux0c031fd37f69deb0cd8c43bbfcfccd62ebd7e952 < ea7d7bd90079d96f9c86bdaf0b106e0cd2a70661affected
LinuxLinux0c031fd37f69deb0cd8c43bbfcfccd62ebd7e952 < 42b805af102471f53e3c7867b8c2b502ea4eef7eaffected
LinuxLinux92053ae0398a58c6914e807d5e070297ba8cfe88affected
LinuxLinux5.15.17 < 5.15.46affected
LinuxLinux5.16.3 < 5.17affected
LinuxLinux5.17affected
LinuxLinux0 < 5.17unaffected
LinuxLinux5.15.46 <= 5.15.*unaffected
LinuxLinux5.17.14 <= 5.17.*unaffected
LinuxLinux5.18.3 <= 5.18.*unaffected
LinuxLinux5.19 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References