PT-2025-7972 · Linux+4 · Linux Kernel+4
Mikulas Patocka
·
Published
2022-04-13
·
Updated
2025-09-29
·
CVE-2022-49044
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory corruption issue exists in the Linux kernel due to the dm-integrity setup, where the
tag size parameter is less than the actual digest size. This causes dm-integrity to write beyond the end of the ic->recalc tags array, resulting in memory corruption. The corruption occurs in the integrity recalc function, specifically in the integrity sector checksum and crypto shash final functions.Recommendations
To resolve this issue, increase the size of the tags array to accommodate the full digest size for the last member of the tags array, ensuring enough padding at the end to prevent memory corruption.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Centos
Linux Kernel
Red Hat
Suse