Log in Start free

Vulnerability · Published Feb 26, 2025 · Assigned by Linux

CVE-2022-49168btrfs: do not clean up repair bio if submit fails

High 7.8

In plain English

A high-severity use-after-free in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 73.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clean up repair bio if submit fails The submit helper will always run bio_endio() on the bio if it fails to submit, so cleaning up the bio just leads to a variety of use-after-free and NULL pointer dereference bugs because we race with the endio function that is cleaning up the bio. Instead just return BLK_STS_OK as the repair function has to continue to process the rest of the pages, and the endio for the repair bio will do the appropriate cleanup for the page that it was given.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.17.3-1DEBIAN-CVE-2022-49168
Debian:13linux5.17.3-1DEBIAN-CVE-2022-49168
Debian:14linux5.17.3-1DEBIAN-CVE-2022-49168
Ubuntu:22.04:LTSlinux5.15.0-144.157UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux5.15.0-144.157USN-7654-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-aws5.15.0-1088.95UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-aws5.15.0-1088.95USN-7654-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-azure5.15.0-1094.103UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-azure5.15.0-1094.103USN-7711-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1094.103.1UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-gcp5.15.0-1087.96UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-gcp5.15.0-1087.96USN-7654-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-gke5.15.0-1085.91UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-gke5.15.0-1085.91USN-7654-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1070.78USN-7654-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1070.78UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-ibm5.15.0-1080.83UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-ibm5.15.0-1080.83USN-7654-1
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1083.89UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1083.89USN-7654-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1084.89UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-kvm5.15.0-1084.89USN-7654-4
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-144.157UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-144.157USN-7654-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1082.83USN-7654-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1082.83UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1041.41USN-7654-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1041.41UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1030.30UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1030.30USN-7654-1
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-oracle5.15.0-1085.91UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-oracle5.15.0-1085.91USN-7654-1
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-raspi5.15.0-1083.86UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-raspi5.15.0-1083.86USN-7686-1
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1052.56UBUNTU-CVE-2022-49168
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1052.56USN-7654-5

Affected products (as reported)

VendorProductVersions
Linux Linux 6c387ab20db15f2bd448f7c508e2638101b16ea1 – before e7e1d15d2bd8c373cf621614ddd17971a21327136c387ab20db15f2bd448f7c508e2638101b16ea1 – before 7170875083254b51fcc5d67f96640977083f481e6c387ab20db15f2bd448f7c508e2638101b16ea1 – before e76c78c48902dae6fa612749f59162bca0a79e0b6c387ab20db15f2bd448f7c508e2638101b16ea1 – before d1cb11fb45ebbb1e7dfe5e9038b32ea72c184b146c387ab20db15f2bd448f7c508e2638101b16ea1 – before 8cbc3001a3264d998d6b6db3e23f935c158abd4d
Linux Linux 3.18

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References