In the Linux kernel, the following vulnerability has been resolved:
btrfs: zoned: clone zoned device info when cloning a device
When cloning a btrfsdevice, we're not cloning the associated btrfszoneddeviceinfo structure of the device in case of a zoned filesystem.
Later on this leads to a NULL pointer dereference when accessing the device's zone_info for instance when setting a zone as active.
This was uncovered by fstests' testcase btrfs/161.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad88cabcec942c033f980cd1e28d56ecdaf5f3b8",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"304595847524928969536723665466148792779",
"197607694443986063620349249726435132536",
"220620693065123139342697786944644900997"
]
},
"target": {
"file": "fs/btrfs/zoned.c"
},
"id": "CVE-2022-49833-04ca2843",
"deprecated": false,
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad88cabcec942c033f980cd1e28d56ecdaf5f3b8",
"signature_version": "v1",
"digest": {
"function_hash": "223391601899111793872426717603115485547",
"length": 792.0
},
"target": {
"function": "clone_fs_devices",
"file": "fs/btrfs/volumes.c"
},
"id": "CVE-2022-49833-74020119",
"deprecated": false,
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21e61ec6d0bb786818490e926aa9aeb4de95ad0d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"304595847524928969536723665466148792779",
"197607694443986063620349249726435132536",
"220620693065123139342697786944644900997"
]
},
"target": {
"file": "fs/btrfs/zoned.c"
},
"id": "CVE-2022-49833-8a3fa45e",
"deprecated": false,
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21e61ec6d0bb786818490e926aa9aeb4de95ad0d",
"signature_version": "v1",
"digest": {
"function_hash": "223391601899111793872426717603115485547",
"length": 792.0
},
"target": {
"function": "clone_fs_devices",
"file": "fs/btrfs/volumes.c"
},
"id": "CVE-2022-49833-a69429a9",
"deprecated": false,
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21e61ec6d0bb786818490e926aa9aeb4de95ad0d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92301549721869711638880677378785186849",
"156561367010085243207544439941988763087",
"286828624236346318048959575988029039368",
"14450338966941247700271621378517131051",
"186322931832830494593575824274211508344",
"230604787022100754538673713838613944126",
"131573618660783103143541638444723661907"
]
},
"target": {
"file": "fs/btrfs/zoned.h"
},
"id": "CVE-2022-49833-b646703d",
"deprecated": false,
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad88cabcec942c033f980cd1e28d56ecdaf5f3b8",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92301549721869711638880677378785186849",
"156561367010085243207544439941988763087",
"286828624236346318048959575988029039368",
"14450338966941247700271621378517131051",
"186322931832830494593575824274211508344",
"230604787022100754538673713838613944126",
"131573618660783103143541638444723661907"
]
},
"target": {
"file": "fs/btrfs/zoned.h"
},
"id": "CVE-2022-49833-b7afb46a",
"deprecated": false,
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21e61ec6d0bb786818490e926aa9aeb4de95ad0d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"139386677224447606642247203048373783116",
"166361533081573151662086911689302570249",
"90928251320166073493208087733436938131"
]
},
"target": {
"file": "fs/btrfs/volumes.c"
},
"id": "CVE-2022-49833-ca7e3f59",
"deprecated": false,
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ad88cabcec942c033f980cd1e28d56ecdaf5f3b8",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"139386677224447606642247203048373783116",
"166361533081573151662086911689302570249",
"90928251320166073493208087733436938131"
]
},
"target": {
"file": "fs/btrfs/volumes.c"
},
"id": "CVE-2022-49833-f0480851",
"deprecated": false,
"signature_type": "Line"
}
]