In the Linux kernel, the following vulnerability has been resolved:
bfq: Update cgroup information before merging bio
When the process is migrated to a different cgroup (or in case of writeback just starts submitting bios associated with a different cgroup) bfqmergebio() can operate with stale cgroup information in bic. Thus the bio can be merged to a request from a different cgroup or it can result in merging of bfqqs for different cgroups or bfqqs of already dead cgroups and causing possible use-after-free issues. Fix the problem by updating cgroup information in bfqmergebio().
[
{
"id": "CVE-2022-49413-1591ebc7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b06691af08b41dfd81052a3362514d9827b44bb1",
"signature_version": "v1",
"digest": {
"line_hashes": [
"304149099149880416661890267210605343348",
"232223226313552279203181039938573552826",
"329474777800983150177957347675255262499",
"177735160295010528721779453724822428217",
"212957548564435710539571046022236763548",
"321391206559103403706814541730860877271",
"225858159824242881877399423888651647775"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-190aeb9d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da9f3025d595956410ceaab2bea01980d7775948",
"signature_version": "v1",
"digest": {
"length": 515.0,
"function_hash": "247649630151377374467400550406335414991"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "bfq_bio_merge",
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-36a675e9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9165200c5627a2cf4408eefabdf0058bdf95e1a",
"signature_version": "v1",
"digest": {
"length": 485.0,
"function_hash": "138062665156638810961719909473952615257"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "bfq_bio_merge",
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-a27fba6b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9165200c5627a2cf4408eefabdf0058bdf95e1a",
"signature_version": "v1",
"digest": {
"line_hashes": [
"24081971064588733538137596052442523835",
"232223226313552279203181039938573552826",
"329474777800983150177957347675255262499",
"177735160295010528721779453724822428217",
"212957548564435710539571046022236763548",
"321391206559103403706814541730860877271",
"211688915157401127300010436165507347263"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-a9a073eb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b06691af08b41dfd81052a3362514d9827b44bb1",
"signature_version": "v1",
"digest": {
"length": 515.0,
"function_hash": "247649630151377374467400550406335414991"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "bfq_bio_merge",
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-ae229944",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ea591cd4eb270393810e7be01feb8fde6a34fbbe",
"signature_version": "v1",
"digest": {
"length": 485.0,
"function_hash": "138062665156638810961719909473952615257"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "bfq_bio_merge",
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-bc1e1ecb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8821f45612f2e6d9adb9c6ba0fb4184f57692aa",
"signature_version": "v1",
"digest": {
"line_hashes": [
"304149099149880416661890267210605343348",
"232223226313552279203181039938573552826",
"329474777800983150177957347675255262499",
"177735160295010528721779453724822428217",
"212957548564435710539571046022236763548",
"321391206559103403706814541730860877271",
"211688915157401127300010436165507347263"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-c0abfc32",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a1077f17169a6059992a0bbdb330e0abad1e6d9",
"signature_version": "v1",
"digest": {
"length": 485.0,
"function_hash": "138062665156638810961719909473952615257"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "bfq_bio_merge",
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-c946ce9c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a1077f17169a6059992a0bbdb330e0abad1e6d9",
"signature_version": "v1",
"digest": {
"line_hashes": [
"24081971064588733538137596052442523835",
"232223226313552279203181039938573552826",
"329474777800983150177957347675255262499",
"177735160295010528721779453724822428217",
"212957548564435710539571046022236763548",
"321391206559103403706814541730860877271",
"211688915157401127300010436165507347263"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-d2cbb3b3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8821f45612f2e6d9adb9c6ba0fb4184f57692aa",
"signature_version": "v1",
"digest": {
"length": 515.0,
"function_hash": "185385206491964775152490226324240059337"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "bfq_bio_merge",
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-e69e3928",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ea591cd4eb270393810e7be01feb8fde6a34fbbe",
"signature_version": "v1",
"digest": {
"line_hashes": [
"24081971064588733538137596052442523835",
"232223226313552279203181039938573552826",
"329474777800983150177957347675255262499",
"177735160295010528721779453724822428217",
"212957548564435710539571046022236763548",
"321391206559103403706814541730860877271",
"211688915157401127300010436165507347263"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "block/bfq-iosched.c"
}
},
{
"id": "CVE-2022-49413-ec456044",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da9f3025d595956410ceaab2bea01980d7775948",
"signature_version": "v1",
"digest": {
"line_hashes": [
"304149099149880416661890267210605343348",
"232223226313552279203181039938573552826",
"329474777800983150177957347675255262499",
"177735160295010528721779453724822428217",
"212957548564435710539571046022236763548",
"321391206559103403706814541730860877271",
"225858159824242881877399423888651647775"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "block/bfq-iosched.c"
}
}
]