CVE-2022-49364

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-49364
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49364.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-49364
Downstream
Published
2025-02-26T02:11:10.295Z
Modified
2026-04-02T08:27:31.459230Z
Summary
f2fs: fix to clear dirty inode in f2fs_evict_inode()
Details

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to clear dirty inode in f2fsevictinode()

As Yanming reported in bugzilla:

https://bugzilla.kernel.org/show_bug.cgi?id=215904

The kernel message is shown below:

kernel BUG at fs/f2fs/inode.c:825! Call Trace: evict+0x282/0x4e0 _dentrykill+0x2b2/0x4d0 shrinkdentrylist+0x17c/0x4f0 shrinkdcacheparent+0x143/0x1e0 doonetree+0x9/0x30 shrinkdcacheforumount+0x51/0x120 genericshutdownsuper+0x5c/0x3a0 killblocksuper+0x90/0xd0 killf2fssuper+0x225/0x310 deactivatelockedsuper+0x78/0xc0 cleanupmnt+0x2b7/0x480 taskworkrun+0xc8/0x150 exittousermodeprepare+0x14a/0x150 syscallexittousermode+0x1d/0x40 dosyscall64+0x48/0x90

The root cause is: inode node and dnode node share the same nid, so during f2fsevictinode(), dnode node truncation will invalidate its NAT entry, so when truncating inode node, it fails due to invalid NAT entry, result in inode is still marked as dirty, fix this issue by clearing dirty for inode and setting SBINEEDFSCK flag in filesystem.

output from dump.f2fs: [printnodeinfo: 354] Node ID [0xf:15] is inode i_nid[0] [0x f : 15]

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49364.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
98e4da8ca301e062d79ae168c67e56f3c3de3ce4
Fixed
54c116615c99e22aa08aa950757ed726e2f60821
Fixed
ccd58045beb997544b94558a9156be4742628491
Fixed
c9196d21359be8c7ee231029d13682273925fd00
Fixed
03c9373b15fa1c245ec99b2b5e7ba209eae4ef42
Fixed
c469953917b319d415fd621b9e5d0ea5203565cd
Fixed
f2db71053dc0409fae785096ad19cce4c8a95af7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49364.json"