In the Linux kernel, the following vulnerability has been resolved:
udf: Fix preallocation discarding at indirect extent boundary
When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udfdeleteaext() for deleting extent to avoid some code duplication.
[ { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72f651c96c8aadf087fd782d551bf7db648a8c2e", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-121a424e" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a075f4a549481ce6e8518d8379f193ccec6b746", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-255cebeb" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a075f4a549481ce6e8518d8379f193ccec6b746", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-3eead203" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae56d9a017724f130cf1a263dd82a78d2a6e3852", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-3ef466bb" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-44971fbc" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72f651c96c8aadf087fd782d551bf7db648a8c2e", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-502fc843" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae56d9a017724f130cf1a263dd82a78d2a6e3852", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-7741c960" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-8104c3e6" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63dbbd8f1499b0a161e701a04aa50148d60bd1f7", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-95e039dc" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-b078c672" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63dbbd8f1499b0a161e701a04aa50148d60bd1f7", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-b0dd6441" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d835efd561dfb9bf5409f11f4ecd428d5d29226", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-c2c5f070" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-cf414488" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d835efd561dfb9bf5409f11f4ecd428d5d29226", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-d7f39c65" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7665857f88557c372da35534165721156756f77f", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-d9a38fb4" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12a88f572d6d94b5c0b72e2d1782cc2e96ac06cf", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-ded221db" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b6fa4511a7900db9fb0353b630d4d2ed1ba99c", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c", "function": "udf_discard_prealloc" }, "digest": { "length": 1269.0, "function_hash": "122778333708075338637937566111904692239" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-48946-e097b242" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7665857f88557c372da35534165721156756f77f", "signature_version": "v1", "target": { "file": "fs/udf/truncate.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "139403858297490513101864258921772206577", "267491223168138893117714228712074928893", "249347961487832268071895006164346083356", "87121270929170496829605559949823893855", "135509575964065321280828162641179810634", "172993932543893754913920107004577846665", "9774277323484981951957576310594865782", "318258211464063112782002908167933752973", "89365423753333683561342104329002891566", "81832602447273818278337626102811808370", "160553154594189799028095516393516550839", "306625183130998175749796050937074165217", "34905092578318285281594859615256874214", "330769120734371320967728790113961661302", "234710663964077713116067303984325746342", "243437673017282182231438065613539155109", "319367774356842298226849841129281312731", "38845632995472059488402586147483290215", "201393677629063897899082318103955987519", "325839339494628916078881794204746543654", "204499324728617986226456594425945654347", "154918116600812162862850847292626557971", "203978802396628657282974238395143792064", "218173330927720205942123448791701574582", "125792184617732983586706493074931065480", "243879728595004357243317677767770616680", "18603022378088449181717242712867621146", "195027120166955232831925782008918038428", "206441186195905785107994706757651908135", "328518210569427337612324576805598853672", "92183445156132359081502546784105652118", "325512768619873651736877432418007851869", "117196964300587363080162315599669157834", "308483390254868149911343854988862860118", "233319773918309334519017100392928504212", "289835281925543264234270304656976573068", "24498511132329614446908379368635203621", "120856595822849476103661073026623240358", "262608556644368122192183869454653270826", "63847228963269716703907049511733494868", "156781383753061944075941757851931435894", "308960405617885122831587147619152346988", "163540729658396529702559388033125843217", "164438414049030942031017910854897728290", "198602104655343882918685742289243278297", "87522698982898661073773104011057052265", "512555629583134106901792937423824114", "228370455552605329620475645971270552000", "267835783821071932638613640886249372425", "315873141075972252193691548913107298411" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-48946-f85e7ac1" } ]