CVE-2022-49408
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-49408
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-49408.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-49408
- Downstream
- Published
- 2025-02-26T02:12:32Z
- Modified
- 2025-10-21T10:06:41.173074Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- ext4: fix memory leak in parse_apply_sb_mount_options()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix memory leak in parseapplysbmountoptions()
If processing the on-disk mount options fails after any memory was allocated in the ext4fscontext, e.g. sqfnames, then this memory is leaked. Fix this by calling ext4fcfree() instead of kfree() directly.
Reproducer:
mkfs.ext4 -F /dev/vdc tune2fs /dev/vdc -E mount_opts=usrjquota=file echo clear > /sys/kernel/debug/kmemleak mount /dev/vdc /vdc echo scan > /sys/kernel/debug/kmemleak sleep 5 echo scan > /sys/kernel/debug/kmemleak cat /sys/kernel/debug/kmemleak - References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7edfd85b1ffd36593011dec96ab395912a340418Fixed9ea3e6168948189cec31d0678d2b55b395f88491
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7edfd85b1ffd36593011dec96ab395912a340418Fixedf92ded66e9d0aa20b883a2a5183973abc8f41815
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7edfd85b1ffd36593011dec96ab395912a340418Fixedc069db76ed7b681c69159f44be96d2137e9ca989
Affected versions
v5.*
v5.16
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.17.1
v5.17.10
v5.17.11
v5.17.12
v5.17.13
v5.17.2
v5.17.3
v5.17.4
v5.17.5
v5.17.6
v5.17.7
v5.17.8
v5.17.9
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.2
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ea3e6168948189cec31d0678d2b55b395f88491",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
},
"id": "CVE-2022-49408-24731b9c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"57102572846769867866512135050919045542",
"106504174886776424777342409524642565114",
"81777403497798589507710733287610620303",
"317915913232306288146733849513047254394",
"17370861955863222839220004577492702"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c069db76ed7b681c69159f44be96d2137e9ca989",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "parse_apply_sb_mount_options",
"file": "fs/ext4/super.c"
},
"id": "CVE-2022-49408-3dbc5443",
"digest": {
"length": 1097.0,
"function_hash": "43177506460864136440593897145850863018"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c069db76ed7b681c69159f44be96d2137e9ca989",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
},
"id": "CVE-2022-49408-43803408",
"digest": {
"threshold": 0.9,
"line_hashes": [
"57102572846769867866512135050919045542",
"106504174886776424777342409524642565114",
"81777403497798589507710733287610620303",
"317915913232306288146733849513047254394",
"17370861955863222839220004577492702"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f92ded66e9d0aa20b883a2a5183973abc8f41815",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "parse_apply_sb_mount_options",
"file": "fs/ext4/super.c"
},
"id": "CVE-2022-49408-7363d20f",
"digest": {
"length": 1097.0,
"function_hash": "43177506460864136440593897145850863018"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ea3e6168948189cec31d0678d2b55b395f88491",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "parse_apply_sb_mount_options",
"file": "fs/ext4/super.c"
},
"id": "CVE-2022-49408-df2d5efc",
"digest": {
"length": 1097.0,
"function_hash": "43177506460864136440593897145850863018"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f92ded66e9d0aa20b883a2a5183973abc8f41815",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
},
"id": "CVE-2022-49408-e1f6aec2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"57102572846769867866512135050919045542",
"106504174886776424777342409524642565114",
"81777403497798589507710733287610620303",
"317915913232306288146733849513047254394",
"17370861955863222839220004577492702"
]
},
"signature_type": "Line"
}
]