PT-2025-8314 · Linux+1 · Linux Kernel+1

Ming Yan · Publicado 2025-02-26 · Atualizado 2025-03-02 · CVE-2022-49380

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.17

Description A bug in the F2FS file system has been identified, which can cause the kernel to panic when the dec valid node count() function is called. The issue occurs when the .total valid block count or .total valid node count values are fuzzed to zero. This bug can be reproduced by running specific commands and is evident in the kernel message. The root cause of the issue is related to the f2fs bug on() function in dec valid node count().

Recommendations For Linux kernel version 5.17, apply the patch that fixes the issue by printing warning information and setting SBI NEED FSCK into CP instead of panicking.

Exploit

Correção

Identificadores relacionados

CVE-2022-49380

Produtos afetados

Astra Linux

Linux Kernel

Referências · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49380.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49380 · Aviso do Fabricante
• https://git.kernel.org/stable/c/f8b3c3fcf33105bc1ee7788e3b51b0a1ae42ae53 · Correção
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49380 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2022-49380 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-49380 · Nota de Segurança
• https://twitter.com/CVEnew/status/1896037236308639942 · Publicação no Twitter
• https://git.kernel.org/stable/c/2766ddaf45b69252bb8fe526b5b6e56904a9ae7a · Correção
• https://git.kernel.org/linus/4d17e6fe9293d57081ffdc11e1cf313e25e8fd9e · Nota
• https://cve.org/CVERecord?id=CVE-2022-49380 · Nota de Segurança
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=158612043 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2022-49380 · Aviso do Fabricante
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Nota
• https://git.kernel.org/stable/c/89d9a48d0cd30429463ea4e37ca83be6773ed5eb · Correção
• https://git.kernel.org/stable/c/4d17e6fe9293d57081ffdc11e1cf313e25e8fd9e · Correção