In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix ulist leaks in error paths of qgroup self tests
In the testnosharedqgroup() and testmultiplerefs() qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from the test function without freeing the "oldroots" ulist that was allocated by the previous calls to btrfsfindallroots(). Fix that by calling ulistfree() before returning.
[ { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "102484443271970273307824518483743415527", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "337482537590053028084465032493742391998", "72182364960742955774289986253427221425", "133465058922528876558901948954957916383", "199596273034392075844394894008696556074", "186880803932464843227601479309829908971", "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "102484443271970273307824518483743415527", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "337504209434492914175881829445148531925", "78635823324506603847727309003976639043", "257265108605816611338705699455265831859", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "317521526628318800369379432706381334499", "49867893867829224446889103266962542289", "257265108605816611338705699455265831859", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-49912-040949d0" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f46ea5fa3320dca4fe0c0926b49a5f14cb85de62", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_multiple_refs" }, "digest": { "length": 2854.0, "function_hash": "308318905899379564511377749253767157831" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-197828fd" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d37de92b38932d40e4a251e876cc388f9aee5f42", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_multiple_refs" }, "digest": { "length": 2854.0, "function_hash": "308318905899379564511377749253767157831" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-29adf321" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d81370396025cf63a7a1b5f8bb25a3479203b2ca", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "77697704360221910653684338311783320562", "272001862758155813117937017622874656375", "228283368875810583398470087265105857753", "337482537590053028084465032493742391998", "72182364960742955774289986253427221425", "12367933876356604527297502760083565049", "17337230882434417509767883964994419058", "248688766050385766126180290499281554402", "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "77697704360221910653684338311783320562", "272001862758155813117937017622874656375", "228283368875810583398470087265105857753", "337504209434492914175881829445148531925", "78635823324506603847727309003976639043", "192622492705978522836068333787774026487", "272001862758155813117937017622874656375", "228283368875810583398470087265105857753", "317521526628318800369379432706381334499", "49867893867829224446889103266962542289", "192622492705978522836068333787774026487", "272001862758155813117937017622874656375", "228283368875810583398470087265105857753" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-49912-2fef4a1c" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da7003434bcab0ae9aba3f2c003e734cae093326", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_no_shared_qgroup" }, "digest": { "length": 1833.0, "function_hash": "186723481829277453726646479901278506005" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-3300ecfe" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_multiple_refs" }, "digest": { "length": 2854.0, "function_hash": "308318905899379564511377749253767157831" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-38557481" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f58283d83a588ff5da62fc150de19e798ed2ec2", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_multiple_refs" }, "digest": { "length": 2847.0, "function_hash": "261697290951672841223677578000815861499" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-4632714e" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@203204798831c35d855ecc6417d98267d2d2184b", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_multiple_refs" }, "digest": { "length": 2846.0, "function_hash": "108114106924937092820149218939494950602" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-4b2d8818" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_no_shared_qgroup" }, "digest": { "length": 1833.0, "function_hash": "186723481829277453726646479901278506005" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-4cb260cf" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d81370396025cf63a7a1b5f8bb25a3479203b2ca", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_no_shared_qgroup" }, "digest": { "length": 1817.0, "function_hash": "53976245351595532208171885514248729928" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-5ae61ce1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "102484443271970273307824518483743415527", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "337482537590053028084465032493742391998", "72182364960742955774289986253427221425", "133465058922528876558901948954957916383", "199596273034392075844394894008696556074", "186880803932464843227601479309829908971", "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "102484443271970273307824518483743415527", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "337504209434492914175881829445148531925", "78635823324506603847727309003976639043", "257265108605816611338705699455265831859", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "317521526628318800369379432706381334499", "49867893867829224446889103266962542289", "257265108605816611338705699455265831859", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-49912-63855246" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f58283d83a588ff5da62fc150de19e798ed2ec2", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_no_shared_qgroup" }, "digest": { "length": 1817.0, "function_hash": "53976245351595532208171885514248729928" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-674765fe" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d37de92b38932d40e4a251e876cc388f9aee5f42", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_no_shared_qgroup" }, "digest": { "length": 1833.0, "function_hash": "186723481829277453726646479901278506005" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-7227c984" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f46ea5fa3320dca4fe0c0926b49a5f14cb85de62", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "194620408080038960282510652834524663837", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "337482537590053028084465032493742391998", "72182364960742955774289986253427221425", "23666876527309100352760275369448715441", "146409602429779310121226397294462545732", "227096264184997316630591870690295101372", "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "194620408080038960282510652834524663837", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "337504209434492914175881829445148531925", "78635823324506603847727309003976639043", "179866518561883763509048380487345662097", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "317521526628318800369379432706381334499", "49867893867829224446889103266962542289", "179866518561883763509048380487345662097", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-49912-78546da4" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d81370396025cf63a7a1b5f8bb25a3479203b2ca", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_multiple_refs" }, "digest": { "length": 2847.0, "function_hash": "261697290951672841223677578000815861499" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-823b1d08" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_no_shared_qgroup" }, "digest": { "length": 1833.0, "function_hash": "186723481829277453726646479901278506005" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-89ef0faf" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da7003434bcab0ae9aba3f2c003e734cae093326", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_multiple_refs" }, "digest": { "length": 2854.0, "function_hash": "308318905899379564511377749253767157831" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-966c411b" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_multiple_refs" }, "digest": { "length": 2854.0, "function_hash": "308318905899379564511377749253767157831" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-9b278d0d" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@203204798831c35d855ecc6417d98267d2d2184b", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_no_shared_qgroup" }, "digest": { "length": 1818.0, "function_hash": "86592923571851331635863708156054875850" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-b04845b7" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3f58283d83a588ff5da62fc150de19e798ed2ec2", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "77697704360221910653684338311783320562", "272001862758155813117937017622874656375", "228283368875810583398470087265105857753", "337482537590053028084465032493742391998", "72182364960742955774289986253427221425", "12367933876356604527297502760083565049", "17337230882434417509767883964994419058", "248688766050385766126180290499281554402", "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "77697704360221910653684338311783320562", "272001862758155813117937017622874656375", "228283368875810583398470087265105857753", "337504209434492914175881829445148531925", "78635823324506603847727309003976639043", "192622492705978522836068333787774026487", "272001862758155813117937017622874656375", "228283368875810583398470087265105857753", "317521526628318800369379432706381334499", "49867893867829224446889103266962542289", "192622492705978522836068333787774026487", "272001862758155813117937017622874656375", "228283368875810583398470087265105857753" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-49912-b15175de" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d37de92b38932d40e4a251e876cc388f9aee5f42", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "194620408080038960282510652834524663837", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "337482537590053028084465032493742391998", "72182364960742955774289986253427221425", "23666876527309100352760275369448715441", "146409602429779310121226397294462545732", "227096264184997316630591870690295101372", "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "194620408080038960282510652834524663837", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "337504209434492914175881829445148531925", "78635823324506603847727309003976639043", "179866518561883763509048380487345662097", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "317521526628318800369379432706381334499", "49867893867829224446889103266962542289", "179866518561883763509048380487345662097", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-49912-b492f9bd" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f46ea5fa3320dca4fe0c0926b49a5f14cb85de62", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c", "function": "test_no_shared_qgroup" }, "digest": { "length": 1833.0, "function_hash": "186723481829277453726646479901278506005" }, "deprecated": false, "signature_type": "Function", "id": "CVE-2022-49912-cae59b2e" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@203204798831c35d855ecc6417d98267d2d2184b", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "102484443271970273307824518483743415527", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "337482537590053028084465032493742391998", "72182364960742955774289986253427221425", "133465058922528876558901948954957916383", "199596273034392075844394894008696556074", "186880803932464843227601479309829908971", "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "102484443271970273307824518483743415527", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "337504209434492914175881829445148531925", "78635823324506603847727309003976639043", "257265108605816611338705699455265831859", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104", "317521526628318800369379432706381334499", "49867893867829224446889103266962542289", "257265108605816611338705699455265831859", "337716224484543997417859158241850280896", "194613442823060204823726463380805451104" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-49912-d2803d43" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da7003434bcab0ae9aba3f2c003e734cae093326", "signature_version": "v1", "target": { "file": "fs/btrfs/tests/qgroup-tests.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "194620408080038960282510652834524663837", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "337482537590053028084465032493742391998", "72182364960742955774289986253427221425", "23666876527309100352760275369448715441", "146409602429779310121226397294462545732", "227096264184997316630591870690295101372", "267723461050445033636033717319588111500", "57452407626495107610830313174689376919", "194620408080038960282510652834524663837", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "337504209434492914175881829445148531925", "78635823324506603847727309003976639043", "179866518561883763509048380487345662097", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822", "317521526628318800369379432706381334499", "49867893867829224446889103266962542289", "179866518561883763509048380487345662097", "308504344940639692431914137927951291104", "301400024338773212310176564231478536822" ] }, "deprecated": false, "signature_type": "Line", "id": "CVE-2022-49912-ea89fde9" } ]