CVE-2022-49274

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-49274

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: ocfs2: fix crash when mount with quota enabled There is a reported crash when mounting ocfs2 with quota enabled. RIP: 0010:ocfs2_qinfo_lock_res_init+0x44/0x50 [ocfs2] Call Trace: ocfs2_local_read_info+0xb9/0x6f0 [ocfs2] dquot_load_quota_sb+0x216/0x470 dquot_load_quota_inode+0x85/0x100 ocfs2_enable_quotas+0xa0/0x1c0 [ocfs2] ocfs2_fill_super.cold+0xc8/0x1bf [ocfs2] mount_bdev+0x185/0x1b0 legacy_get_tree+0x27/0x40 vfs_get_tree+0x25/0xb0 path_mount+0x465/0xac0 __x64_sys_mount+0x103/0x140 It is caused by when initializing dqi_gqlock, the corresponding dqi_type and dqi_sb are not properly initialized. This issue is introduced by commit 6c85c2c72819, which wants to avoid accessing uninitialized variables in error cases. So make global quota info properly initialized.

References
Link Resource
https://git.kernel.org/stable/c/01931e1c4e3de5d777253acae64c0e8fd071a1dd Patch
https://git.kernel.org/stable/c/7c5312fdb1dcfdc1951b018669af88d5d6420b31 Patch
https://git.kernel.org/stable/c/de19433423c7bedabbd4f9a25f7dbc62c5e78921 Patch
https://git.kernel.org/stable/c/eda31f77317647b9fbf889779ee1fb6907651865 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

22 Sep 2025, 20:33

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ocfs2: se corrige un fallo al montar con la cuota habilitada Se ha informado de un fallo al montar ocfs2 con la cuota habilitada. RIP: 0010:ocfs2_qinfo_lock_res_init+0x44/0x50 [ocfs2] Seguimiento de llamadas: ocfs2_local_read_info+0xb9/0x6f0 [ocfs2] dquot_load_quota_sb+0x216/0x470 dquot_load_quota_inode+0x85/0x100 ocfs2_enable_quotas+0xa0/0x1c0 [ocfs2] ocfs2_fill_super.cold+0xc8/0x1bf [ocfs2] mount_bdev+0x185/0x1b0 legacy_get_tree+0x27/0x40 vfs_get_tree+0x25/0xb0 path_mount+0x465/0xac0 __x64_sys_mount+0x103/0x140 Esto se debe a que, al inicializar dqi_gqlock, los dqi_type y dqi_sb correspondientes no se inicializan correctamente. Este problema lo introduce el commit 6c85c2c72819, que quiere evitar el acceso a variables no inicializadas en casos de error. Por lo tanto, haga que la información de cuota global se inicialice correctamente.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-908
References () https://git.kernel.org/stable/c/01931e1c4e3de5d777253acae64c0e8fd071a1dd - () https://git.kernel.org/stable/c/01931e1c4e3de5d777253acae64c0e8fd071a1dd - Patch
References () https://git.kernel.org/stable/c/7c5312fdb1dcfdc1951b018669af88d5d6420b31 - () https://git.kernel.org/stable/c/7c5312fdb1dcfdc1951b018669af88d5d6420b31 - Patch
References () https://git.kernel.org/stable/c/de19433423c7bedabbd4f9a25f7dbc62c5e78921 - () https://git.kernel.org/stable/c/de19433423c7bedabbd4f9a25f7dbc62c5e78921 - Patch
References () https://git.kernel.org/stable/c/eda31f77317647b9fbf889779ee1fb6907651865 - () https://git.kernel.org/stable/c/eda31f77317647b9fbf889779ee1fb6907651865 - Patch

26 Feb 2025, 07:01

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-26 07:01

Updated : 2025-09-22 20:33

NVD link : CVE-2022-49274

Mitre link : CVE-2022-49274

CVE.ORG link : CVE-2022-49274

JSON object : View

Products Affected

linux

CWE
CWE-908

Use of Uninitialized Resource