In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix inode list leak during backref walking at resolveindirectrefs()
During backref walking, at resolveindirectrefs(), if we get an error we jump to the 'out' label and call ulist_free() on the 'parents' ulist, which frees all the elements in the ulist - however that does not free any inode lists that may be attached to elements, through the 'aux' field of a ulist node, so we end up leaking lists if we have any attached to the unodes.
Fix this by calling freeleaflist() instead of ulistfree() when we exit from resolveindirectrefs(). The static function freeleaf_list() is moved up for this to be possible and it's slightly simplified by removing unnecessary code.
[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ba3479f9e96b9ad460c7e77abc26dd16e5dec4f",
        "signature_version": "v1",
        "digest": {
            "function_hash": "91930878733132932071438072176131259245",
            "length": 275.0
        },
        "target": {
            "function": "free_leaf_list",
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-07501e6f",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cded2c89774b99b67c98147ae103ea878c92a206",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "322910621800158053618155300749041877484",
                "265540531494849557191564285722748193220",
                "34438144852637050038940833249782171601",
                "112611538136233308309849461438010022239",
                "89127448050532487259438983670790494244",
                "255002250147967054196834143818622495994",
                "164595022519788762172663240360228581287",
                "316796570921468287208104428993553867437",
                "165529263002367419393749472770852230221",
                "160361396288974451038147164993896631323",
                "183158728047357019375363067414255306214",
                "76705119097599647354778356504609128794",
                "84404424847784519119574647769919327227",
                "28305788084749971352640294691613341997",
                "128050615881976177619171953058998167770",
                "251728023683839369401690580948951600988",
                "172963728913704228108918249053696295620",
                "148626649088841824482694514195985276965",
                "311323312876952304225922695926898329893",
                "86827683655107560738329762273559605272",
                "322150212754933620373269050826883174534",
                "161200462399491712372627258160299462177",
                "264680162675018449699708112484720553286",
                "222140259529073824981796527802446186283",
                "67829795649046566945357946828190430290"
            ]
        },
        "target": {
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-13c9f8e1",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1dc9019bb5f89abae85645de1a2dd4830c1f8e9",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "322910621800158053618155300749041877484",
                "265540531494849557191564285722748193220",
                "34438144852637050038940833249782171601",
                "112611538136233308309849461438010022239",
                "89127448050532487259438983670790494244",
                "255002250147967054196834143818622495994",
                "164595022519788762172663240360228581287",
                "316796570921468287208104428993553867437",
                "165529263002367419393749472770852230221",
                "160361396288974451038147164993896631323",
                "183158728047357019375363067414255306214",
                "76705119097599647354778356504609128794",
                "84404424847784519119574647769919327227",
                "28305788084749971352640294691613341997",
                "128050615881976177619171953058998167770",
                "251728023683839369401690580948951600988",
                "172963728913704228108918249053696295620",
                "148626649088841824482694514195985276965",
                "311323312876952304225922695926898329893",
                "86827683655107560738329762273559605272",
                "322150212754933620373269050826883174534",
                "161200462399491712372627258160299462177",
                "264680162675018449699708112484720553286",
                "222140259529073824981796527802446186283",
                "67829795649046566945357946828190430290"
            ]
        },
        "target": {
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-1ae89a13",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2c0329406bb28109c07c6e23e5e3e0fa618a95d7",
        "signature_version": "v1",
        "digest": {
            "function_hash": "91930878733132932071438072176131259245",
            "length": 275.0
        },
        "target": {
            "function": "free_leaf_list",
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-32cb092a",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2c0329406bb28109c07c6e23e5e3e0fa618a95d7",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "322910621800158053618155300749041877484",
                "265540531494849557191564285722748193220",
                "34438144852637050038940833249782171601",
                "112611538136233308309849461438010022239",
                "89127448050532487259438983670790494244",
                "255002250147967054196834143818622495994",
                "164595022519788762172663240360228581287",
                "316796570921468287208104428993553867437",
                "165529263002367419393749472770852230221",
                "160361396288974451038147164993896631323",
                "183158728047357019375363067414255306214",
                "76705119097599647354778356504609128794",
                "84404424847784519119574647769919327227",
                "28305788084749971352640294691613341997",
                "128050615881976177619171953058998167770",
                "251728023683839369401690580948951600988",
                "172963728913704228108918249053696295620",
                "148626649088841824482694514195985276965",
                "311323312876952304225922695926898329893",
                "86827683655107560738329762273559605272",
                "322150212754933620373269050826883174534",
                "161200462399491712372627258160299462177",
                "264680162675018449699708112484720553286",
                "222140259529073824981796527802446186283",
                "67829795649046566945357946828190430290"
            ]
        },
        "target": {
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-3a3bdfda",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5614dc3a47e3310fbc77ea3b67eaadd1c6417bf1",
        "signature_version": "v1",
        "digest": {
            "function_hash": "91930878733132932071438072176131259245",
            "length": 275.0
        },
        "target": {
            "function": "free_leaf_list",
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-549e00d2",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a52e24c7fcc3c5ce3588a14e3663c00868d36623",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "322910621800158053618155300749041877484",
                "265540531494849557191564285722748193220",
                "34438144852637050038940833249782171601",
                "112611538136233308309849461438010022239",
                "89127448050532487259438983670790494244",
                "255002250147967054196834143818622495994",
                "164595022519788762172663240360228581287",
                "316796570921468287208104428993553867437",
                "165529263002367419393749472770852230221",
                "160361396288974451038147164993896631323",
                "183158728047357019375363067414255306214",
                "76705119097599647354778356504609128794",
                "84404424847784519119574647769919327227",
                "28305788084749971352640294691613341997",
                "128050615881976177619171953058998167770",
                "251728023683839369401690580948951600988",
                "172963728913704228108918249053696295620",
                "148626649088841824482694514195985276965",
                "311323312876952304225922695926898329893",
                "86827683655107560738329762273559605272",
                "322150212754933620373269050826883174534",
                "161200462399491712372627258160299462177",
                "271806516398475613249348218019234858978",
                "262803521690885640637873065669552232507",
                "213599168771452954177884715016588623178"
            ]
        },
        "target": {
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-5f5d8fdc",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1dc9019bb5f89abae85645de1a2dd4830c1f8e9",
        "signature_version": "v1",
        "digest": {
            "function_hash": "91930878733132932071438072176131259245",
            "length": 275.0
        },
        "target": {
            "function": "free_leaf_list",
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-6f590dcf",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cded2c89774b99b67c98147ae103ea878c92a206",
        "signature_version": "v1",
        "digest": {
            "function_hash": "91930878733132932071438072176131259245",
            "length": 275.0
        },
        "target": {
            "function": "free_leaf_list",
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-7871f44d",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ba3479f9e96b9ad460c7e77abc26dd16e5dec4f",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "322910621800158053618155300749041877484",
                "265540531494849557191564285722748193220",
                "34438144852637050038940833249782171601",
                "112611538136233308309849461438010022239",
                "89127448050532487259438983670790494244",
                "255002250147967054196834143818622495994",
                "164595022519788762172663240360228581287",
                "316796570921468287208104428993553867437",
                "165529263002367419393749472770852230221",
                "160361396288974451038147164993896631323",
                "183158728047357019375363067414255306214",
                "76705119097599647354778356504609128794",
                "84404424847784519119574647769919327227",
                "28305788084749971352640294691613341997",
                "128050615881976177619171953058998167770",
                "251728023683839369401690580948951600988",
                "172963728913704228108918249053696295620",
                "148626649088841824482694514195985276965",
                "311323312876952304225922695926898329893",
                "86827683655107560738329762273559605272",
                "322150212754933620373269050826883174534",
                "161200462399491712372627258160299462177",
                "271806516398475613249348218019234858978",
                "262803521690885640637873065669552232507",
                "213599168771452954177884715016588623178"
            ]
        },
        "target": {
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-852cee79",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@396515db923ad5cbeb179d6b88927870b4cbebb7",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "322910621800158053618155300749041877484",
                "265540531494849557191564285722748193220",
                "34438144852637050038940833249782171601",
                "112611538136233308309849461438010022239",
                "89127448050532487259438983670790494244",
                "255002250147967054196834143818622495994",
                "164595022519788762172663240360228581287",
                "316796570921468287208104428993553867437",
                "165529263002367419393749472770852230221",
                "160361396288974451038147164993896631323",
                "183158728047357019375363067414255306214",
                "76705119097599647354778356504609128794",
                "84404424847784519119574647769919327227",
                "28305788084749971352640294691613341997",
                "128050615881976177619171953058998167770",
                "251728023683839369401690580948951600988",
                "172963728913704228108918249053696295620",
                "148626649088841824482694514195985276965",
                "311323312876952304225922695926898329893",
                "86827683655107560738329762273559605272",
                "322150212754933620373269050826883174534",
                "161200462399491712372627258160299462177",
                "271806516398475613249348218019234858978",
                "262803521690885640637873065669552232507",
                "213599168771452954177884715016588623178"
            ]
        },
        "target": {
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-9dc49516",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a52e24c7fcc3c5ce3588a14e3663c00868d36623",
        "signature_version": "v1",
        "digest": {
            "function_hash": "91930878733132932071438072176131259245",
            "length": 275.0
        },
        "target": {
            "function": "free_leaf_list",
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-bb5033ec",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@396515db923ad5cbeb179d6b88927870b4cbebb7",
        "signature_version": "v1",
        "digest": {
            "function_hash": "91930878733132932071438072176131259245",
            "length": 275.0
        },
        "target": {
            "function": "free_leaf_list",
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-bf84f9b0",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5614dc3a47e3310fbc77ea3b67eaadd1c6417bf1",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "322910621800158053618155300749041877484",
                "265540531494849557191564285722748193220",
                "34438144852637050038940833249782171601",
                "112611538136233308309849461438010022239",
                "89127448050532487259438983670790494244",
                "255002250147967054196834143818622495994",
                "164595022519788762172663240360228581287",
                "316796570921468287208104428993553867437",
                "165529263002367419393749472770852230221",
                "160361396288974451038147164993896631323",
                "183158728047357019375363067414255306214",
                "76705119097599647354778356504609128794",
                "84404424847784519119574647769919327227",
                "28305788084749971352640294691613341997",
                "128050615881976177619171953058998167770",
                "251728023683839369401690580948951600988",
                "172963728913704228108918249053696295620",
                "148626649088841824482694514195985276965",
                "311323312876952304225922695926898329893",
                "86827683655107560738329762273559605272",
                "322150212754933620373269050826883174534",
                "161200462399491712372627258160299462177",
                "271806516398475613249348218019234858978",
                "262803521690885640637873065669552232507",
                "213599168771452954177884715016588623178"
            ]
        },
        "target": {
            "file": "fs/btrfs/backref.c"
        },
        "id": "CVE-2022-49914-f574ec19",
        "deprecated": false,
        "signature_type": "Line"
    }
]