In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid cycles in directory h-tree
A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its hands while doing a node split and consequently accessing unallocated memory. Fix the problem by verifying traversed block numbers are unique.
[
{
"id": "CVE-2022-49343-104ddac9",
"target": {
"function": "dx_probe",
"file": "fs/ext4/namei.c"
},
"digest": {
"length": 3339.0,
"function_hash": "188233821304965794822901647177177860199"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3ad9ff6f06c1dc6abf7437691c88ca3d6da3ac0",
"signature_type": "Function"
},
{
"id": "CVE-2022-49343-10f6acb7",
"target": {
"file": "fs/ext4/namei.c"
},
"digest": {
"line_hashes": [
"112501470789806876077454822148905223447",
"46319659697278816249471735728089058855",
"290047114325209960270383338737874461751",
"184972640115492339884412263904876484500",
"50704846114209423080272037146798326470",
"19562825824540702183423797087238391826",
"185482301975186758602041502694961538699",
"321781295193170019689419965631719640459",
"191168711448336432172657950506229121840",
"247126896621016231422152079582061272176",
"69268020717314488735752346255084028055",
"272754018582228296297236311806831371879",
"142422987603315022990848981604223854798",
"200142527778841986589547472188524487289",
"31182339308980010159730553143304914399",
"329966915151503207591167374871101861870",
"196850943385058414893590143393988507026",
"322487705781760625682214546955381375107",
"168848122064915947328507251418774692920",
"117915172697230827538650477769743911065",
"264353985558290750820356242033198849002",
"178843771691719759583638705015226956991",
"238383677724885156816416842849670897126",
"257641008469233119100089898564118020881",
"3851474928584305248450990079258905011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24b8206fec1db21d7e82f21f0b2ff5e5672cf5b3",
"signature_type": "Line"
},
{
"id": "CVE-2022-49343-119e0999",
"target": {
"function": "dx_probe",
"file": "fs/ext4/namei.c"
},
"digest": {
"length": 3596.0,
"function_hash": "294407216921961924010091349986449079447"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ba733f879c2a88910744647e41edeefbc0d92b2",
"signature_type": "Function"
},
{
"id": "CVE-2022-49343-49dbf6eb",
"target": {
"function": "dx_probe",
"file": "fs/ext4/namei.c"
},
"digest": {
"length": 3347.0,
"function_hash": "31813748238344965740406707202242456260"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ff4cafa51762da3824881a9000ca421d4b78b138",
"signature_type": "Function"
},
{
"id": "CVE-2022-49343-6dd40ad3",
"target": {
"function": "dx_probe",
"file": "fs/ext4/namei.c"
},
"digest": {
"length": 3596.0,
"function_hash": "294407216921961924010091349986449079447"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5a16a6df2c16eaf4de04948553ef0089dee463f",
"signature_type": "Function"
},
{
"id": "CVE-2022-49343-87cc4358",
"target": {
"file": "fs/ext4/namei.c"
},
"digest": {
"line_hashes": [
"112501470789806876077454822148905223447",
"46319659697278816249471735728089058855",
"290047114325209960270383338737874461751",
"184972640115492339884412263904876484500",
"50704846114209423080272037146798326470",
"19562825824540702183423797087238391826",
"185482301975186758602041502694961538699",
"321781295193170019689419965631719640459",
"191168711448336432172657950506229121840",
"247126896621016231422152079582061272176",
"69268020717314488735752346255084028055",
"272754018582228296297236311806831371879",
"142422987603315022990848981604223854798",
"200142527778841986589547472188524487289",
"31182339308980010159730553143304914399",
"329966915151503207591167374871101861870",
"196850943385058414893590143393988507026",
"322487705781760625682214546955381375107",
"168848122064915947328507251418774692920",
"117915172697230827538650477769743911065",
"264353985558290750820356242033198849002",
"178843771691719759583638705015226956991",
"238383677724885156816416842849670897126",
"257641008469233119100089898564118020881",
"3851474928584305248450990079258905011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6084240bfc44bf265ab6ae7d96980469b05be0f1",
"signature_type": "Line"
},
{
"id": "CVE-2022-49343-89240294",
"target": {
"file": "fs/ext4/namei.c"
},
"digest": {
"line_hashes": [
"112501470789806876077454822148905223447",
"46319659697278816249471735728089058855",
"290047114325209960270383338737874461751",
"184972640115492339884412263904876484500",
"50704846114209423080272037146798326470",
"19562825824540702183423797087238391826",
"185482301975186758602041502694961538699",
"321781295193170019689419965631719640459",
"191168711448336432172657950506229121840",
"247126896621016231422152079582061272176",
"69268020717314488735752346255084028055",
"272754018582228296297236311806831371879",
"142422987603315022990848981604223854798",
"200142527778841986589547472188524487289",
"31182339308980010159730553143304914399",
"329966915151503207591167374871101861870",
"196850943385058414893590143393988507026",
"322487705781760625682214546955381375107",
"168848122064915947328507251418774692920",
"117915172697230827538650477769743911065",
"264353985558290750820356242033198849002",
"178843771691719759583638705015226956991",
"238383677724885156816416842849670897126",
"257641008469233119100089898564118020881",
"3851474928584305248450990079258905011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ff4cafa51762da3824881a9000ca421d4b78b138",
"signature_type": "Line"
},
{
"id": "CVE-2022-49343-9974ff09",
"target": {
"file": "fs/ext4/namei.c"
},
"digest": {
"line_hashes": [
"112501470789806876077454822148905223447",
"46319659697278816249471735728089058855",
"290047114325209960270383338737874461751",
"184972640115492339884412263904876484500",
"50704846114209423080272037146798326470",
"19562825824540702183423797087238391826",
"185482301975186758602041502694961538699",
"321781295193170019689419965631719640459",
"191168711448336432172657950506229121840",
"247126896621016231422152079582061272176",
"69268020717314488735752346255084028055",
"272754018582228296297236311806831371879",
"142422987603315022990848981604223854798",
"200142527778841986589547472188524487289",
"31182339308980010159730553143304914399",
"329966915151503207591167374871101861870",
"196850943385058414893590143393988507026",
"322487705781760625682214546955381375107",
"168848122064915947328507251418774692920",
"117915172697230827538650477769743911065",
"264353985558290750820356242033198849002",
"178843771691719759583638705015226956991",
"238383677724885156816416842849670897126",
"257641008469233119100089898564118020881",
"3851474928584305248450990079258905011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3ad9ff6f06c1dc6abf7437691c88ca3d6da3ac0",
"signature_type": "Line"
},
{
"id": "CVE-2022-49343-9cf2cfc4",
"target": {
"file": "fs/ext4/namei.c"
},
"digest": {
"line_hashes": [
"112501470789806876077454822148905223447",
"46319659697278816249471735728089058855",
"290047114325209960270383338737874461751",
"184972640115492339884412263904876484500",
"50704846114209423080272037146798326470",
"19562825824540702183423797087238391826",
"185482301975186758602041502694961538699",
"321781295193170019689419965631719640459",
"191168711448336432172657950506229121840",
"247126896621016231422152079582061272176",
"69268020717314488735752346255084028055",
"272754018582228296297236311806831371879",
"142422987603315022990848981604223854798",
"200142527778841986589547472188524487289",
"31182339308980010159730553143304914399",
"329966915151503207591167374871101861870",
"196850943385058414893590143393988507026",
"322487705781760625682214546955381375107",
"168848122064915947328507251418774692920",
"117915172697230827538650477769743911065",
"264353985558290750820356242033198849002",
"178843771691719759583638705015226956991",
"238383677724885156816416842849670897126",
"257641008469233119100089898564118020881",
"3851474928584305248450990079258905011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5a16a6df2c16eaf4de04948553ef0089dee463f",
"signature_type": "Line"
},
{
"id": "CVE-2022-49343-a3ed8344",
"target": {
"function": "dx_probe",
"file": "fs/ext4/namei.c"
},
"digest": {
"length": 3339.0,
"function_hash": "188233821304965794822901647177177860199"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24b8206fec1db21d7e82f21f0b2ff5e5672cf5b3",
"signature_type": "Function"
},
{
"id": "CVE-2022-49343-a53cb35a",
"target": {
"file": "fs/ext4/namei.c"
},
"digest": {
"line_hashes": [
"112501470789806876077454822148905223447",
"46319659697278816249471735728089058855",
"290047114325209960270383338737874461751",
"184972640115492339884412263904876484500",
"50704846114209423080272037146798326470",
"19562825824540702183423797087238391826",
"185482301975186758602041502694961538699",
"321781295193170019689419965631719640459",
"191168711448336432172657950506229121840",
"247126896621016231422152079582061272176",
"69268020717314488735752346255084028055",
"272754018582228296297236311806831371879",
"142422987603315022990848981604223854798",
"200142527778841986589547472188524487289",
"31182339308980010159730553143304914399",
"329966915151503207591167374871101861870",
"196850943385058414893590143393988507026",
"322487705781760625682214546955381375107",
"168848122064915947328507251418774692920",
"117915172697230827538650477769743911065",
"264353985558290750820356242033198849002",
"178843771691719759583638705015226956991",
"238383677724885156816416842849670897126",
"257641008469233119100089898564118020881",
"3851474928584305248450990079258905011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e157c8f87e8fac112d6c955e69a60cdb9bc80a60",
"signature_type": "Line"
},
{
"id": "CVE-2022-49343-ab0b06a5",
"target": {
"file": "fs/ext4/namei.c"
},
"digest": {
"line_hashes": [
"112501470789806876077454822148905223447",
"46319659697278816249471735728089058855",
"290047114325209960270383338737874461751",
"184972640115492339884412263904876484500",
"50704846114209423080272037146798326470",
"19562825824540702183423797087238391826",
"185482301975186758602041502694961538699",
"321781295193170019689419965631719640459",
"191168711448336432172657950506229121840",
"247126896621016231422152079582061272176",
"69268020717314488735752346255084028055",
"272754018582228296297236311806831371879",
"142422987603315022990848981604223854798",
"200142527778841986589547472188524487289",
"31182339308980010159730553143304914399",
"329966915151503207591167374871101861870",
"196850943385058414893590143393988507026",
"322487705781760625682214546955381375107",
"168848122064915947328507251418774692920",
"117915172697230827538650477769743911065",
"264353985558290750820356242033198849002",
"178843771691719759583638705015226956991",
"238383677724885156816416842849670897126",
"257641008469233119100089898564118020881",
"3851474928584305248450990079258905011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3ba733f879c2a88910744647e41edeefbc0d92b2",
"signature_type": "Line"
},
{
"id": "CVE-2022-49343-c764b4b1",
"target": {
"file": "fs/ext4/namei.c"
},
"digest": {
"line_hashes": [
"112501470789806876077454822148905223447",
"46319659697278816249471735728089058855",
"290047114325209960270383338737874461751",
"184972640115492339884412263904876484500",
"50704846114209423080272037146798326470",
"19562825824540702183423797087238391826",
"185482301975186758602041502694961538699",
"321781295193170019689419965631719640459",
"191168711448336432172657950506229121840",
"247126896621016231422152079582061272176",
"69268020717314488735752346255084028055",
"272754018582228296297236311806831371879",
"142422987603315022990848981604223854798",
"200142527778841986589547472188524487289",
"31182339308980010159730553143304914399",
"329966915151503207591167374871101861870",
"196850943385058414893590143393988507026",
"322487705781760625682214546955381375107",
"168848122064915947328507251418774692920",
"117915172697230827538650477769743911065",
"264353985558290750820356242033198849002",
"178843771691719759583638705015226956991",
"238383677724885156816416842849670897126",
"257641008469233119100089898564118020881",
"3851474928584305248450990079258905011"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a3ce941645407cd0b0b7f01ad9e2ea3770f46cc",
"signature_type": "Line"
},
{
"id": "CVE-2022-49343-dd1b0ea4",
"target": {
"function": "dx_probe",
"file": "fs/ext4/namei.c"
},
"digest": {
"length": 3596.0,
"function_hash": "294407216921961924010091349986449079447"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6084240bfc44bf265ab6ae7d96980469b05be0f1",
"signature_type": "Function"
},
{
"id": "CVE-2022-49343-e05a1cd8",
"target": {
"function": "dx_probe",
"file": "fs/ext4/namei.c"
},
"digest": {
"length": 3596.0,
"function_hash": "294407216921961924010091349986449079447"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a3ce941645407cd0b0b7f01ad9e2ea3770f46cc",
"signature_type": "Function"
},
{
"id": "CVE-2022-49343-f68333d2",
"target": {
"function": "dx_probe",
"file": "fs/ext4/namei.c"
},
"digest": {
"length": 3347.0,
"function_hash": "31813748238344965740406707202242456260"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e157c8f87e8fac112d6c955e69a60cdb9bc80a60",
"signature_type": "Function"
}
]