CVE-2022-49033
published 2024-10-21CVE-2022-49033: In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() Syzkaller…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.25%
16.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
Syzkaller reported BUG as follows:
BUG: sleeping function called from invalid context at
include/linux/sched/mm.h:274
Call Trace:
dump_stack_lvl+0xcd/0x134
__might_resched.cold+0x222/0x26b
kmem_cache_alloc+0x2e7/0x3c0
update_qgroup_limit_item+0xe1/0x390
btrfs_qgroup_inherit+0x147b/0x1ee0
create_subvol+0x4eb/0x1710
btrfs_mksubvol+0xfe5/0x13f0
__btrfs_ioctl_snap_create+0x2b0/0x430
btrfs_ioctl_snap_create_v2+0x25a/0x520
btrfs_ioctl+0x2a1c/0x5ce0
__x64_sys_ioctl+0x193/0x200
do_syscall_64+0x35/0x80
Fix this by calling qgroup_dirty() on @dstqgroup, and update limit item in
btrfs_run_qgroups() later outside of the spinlock context.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.12-1 (bookworm) | linux 6.0.12-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= e8c8541ac379709db8d2339e1cb720469fc2cd8f < 89840b12c8fad7200eb6478525c13261512c01be | 89840b12c8fad7200eb6478525c13261512c01be |
| linux | linux | >= e8c8541ac379709db8d2339e1cb720469fc2cd8f < 3c98e91be6aea4c7acf09da6eb0c107ea9186bb5 | 3c98e91be6aea4c7acf09da6eb0c107ea9186bb5 |
| linux | linux | >= e8c8541ac379709db8d2339e1cb720469fc2cd8f < f4b930a1602b05e77fee31f9616599b25e910a86 | f4b930a1602b05e77fee31f9616599b25e910a86 |
| linux | linux | >= e8c8541ac379709db8d2339e1cb720469fc2cd8f < 8eb912af525042a7365295eb62f6d5270c2a6462 | 8eb912af525042a7365295eb62f6d5270c2a6462 |
| linux | linux | >= e8c8541ac379709db8d2339e1cb720469fc2cd8f < 01d7c41eac9129fba80d8aed0060caab4a7dbe09 | 01d7c41eac9129fba80d8aed0060caab4a7dbe09 |
| linux | linux | >= e8c8541ac379709db8d2339e1cb720469fc2cd8f < 044da1a371a0da579e805e89c96865f62d8f6f69 | 044da1a371a0da579e805e89c96865f62d8f6f69 |
| linux | linux | >= e8c8541ac379709db8d2339e1cb720469fc2cd8f < 588ae4fdd8b11788a797776b10d6c44ae12bc133 | 588ae4fdd8b11788a797776b10d6c44ae12bc133 |
| linux | linux | >= e8c8541ac379709db8d2339e1cb720469fc2cd8f < f7e942b5bb35d8e3af54053d19a6bf04143a3955 | f7e942b5bb35d8e3af54053d19a6bf04143a3955 |
| linux | linux_kernel | < 4.14.301 | 4.14.301 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 0 < 6.0.12-1 | 6.0.12-1 |
| linux | linux_kernel | >= 4.15 < 4.19.268 | 4.19.268 |
| linux | linux_kernel | >= 4.20 < 5.4.226 | 5.4.226 |
| linux | linux_kernel | >= 5.11 < 5.15.82 | 5.15.82 |
| linux | linux_kernel | >= 5.16 < 6.0.12 | 6.0.12 |
| linux | linux_kernel | >= 5.5 < 5.10.158 | 5.10.158 |
| ubuntu | linux | — | — |
| ubuntu | linux-aws | — | — |
| ubuntu | linux-kvm | — | — |
| ubuntu | linux-lts-xenial | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2026-05-19·CVSS 5.5
CVE-2024-27388 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- BTRFS file system;
- Sun RPC protocol;
- XFRM subsystem;
(CVE-2022-49033, CVE-2024-27388, CVE-2024-49938, CVE-2024-50008,
CVE-2024-50142)
Instructions: After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the sta
Red Hat
kernel: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
vendor_redhat·2024-10-21·CVSS 5.5
CVE-2022-49033 [MEDIUM] CWE-20 kernel: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
kernel: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
Syzkaller reported BUG as follows:
BUG: sleeping function called from invalid context at
include/linux/sched/mm.h:274
Call Trace:
dump_stack_lvl+0xcd/0x134
__might_resched.cold+0x222/0x26b
kmem_cache_alloc+0x2e7/0x3c0
update_qgroup_limit_item+0xe1/0x390
btrfs_qgroup_inherit+0x147b/0x1ee0
create_subvol+0x4eb/0x1710
btrfs_mksubvol+0xfe5/0x13f0
__btrfs_ioctl_snap_create+0x2b0/0x430
btrfs_ioctl_snap_create_v2+0x25a/0x520
btrfs_ioctl+0x2a1c/0x5ce0
__x64_sys_ioctl+0x193/0x200
do_syscall_64+0x35/0x80
Fix this by calling qgroup_dirty() on @dstqgroup, and update limit item
Debian
CVE-2022-49033: linux - In the Linux kernel, the following vulnerability has been resolved: btrfs: qgro...
vendor_debian·2022·CVSS 5.5
CVE-2022-49033 [MEDIUM] CVE-2022-49033: linux - In the Linux kernel, the following vulnerability has been resolved: btrfs: qgro...
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() Syzkaller reported BUG as follows: BUG: sleeping function called from invalid context at include/linux/sched/mm.h:274 Call Trace: dump_stack_lvl+0xcd/0x134 __might_resched.cold+0x222/0x26b kmem_cache_alloc+0x2e7/0x3c0 update_qgroup_limit_item+0xe1/0x390 btrfs_qgroup_inherit+0x147b/0x1ee0 create_subvol+0x4eb/0x1710 btrfs_mksubvol+0xfe5/0x13f0 __btrfs_ioctl_snap_create+0x2b0/0x430 btrfs_ioctl_snap_create_v2+0x25a/0x520 btrfs_ioctl+0x2a1c/0x5ce0 __x64_sys_ioctl+0x193/0x200 do_syscall_64+0x35/0x80 Fix this by calling qgroup_dirty() on @dstqgroup, and update limit item in btrfs_run_qgroups() later outside of the spinlock context.
Scope: local
bookworm:
GHSA
GHSA-wgxq-5c3g-fmq8: In the Linux kernel, the following vulnerability has been resolved:
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
Syzk
ghsa_unreviewed·2024-10-21
CVE-2022-49033 [MEDIUM] GHSA-wgxq-5c3g-fmq8: In the Linux kernel, the following vulnerability has been resolved:
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
Syzk
In the Linux kernel, the following vulnerability has been resolved:
btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
Syzkaller reported BUG as follows:
BUG: sleeping function called from invalid context at
include/linux/sched/mm.h:274
Call Trace:
dump_stack_lvl+0xcd/0x134
__might_resched.cold+0x222/0x26b
kmem_cache_alloc+0x2e7/0x3c0
update_qgroup_limit_item+0xe1/0x390
btrfs_qgroup_inherit+0x147b/0x1ee0
create_subvol+0x4eb/0x1710
btrfs_mksubvol+0xfe5/0x13f0
__btrfs_ioctl_snap_create+0x2b0/0x430
btrfs_ioctl_snap_create_v2+0x25a/0x520
btrfs_ioctl+0x2a1c/0x5ce0
__x64_sys_ioctl+0x193/0x200
do_syscall_64+0x35/0x80
Fix this by calling qgroup_dirty() on @dstqgroup, and update limit item in
btrfs_run_qgroups() later outside of the spinlock context.
OSV
CVE-2022-49033: In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() Syzkal
osv·2024-10-21·CVSS 5.5
CVE-2022-49033 [MEDIUM] CVE-2022-49033: In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() Syzkal
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() Syzkaller reported BUG as follows: BUG: sleeping function called from invalid context at include/linux/sched/mm.h:274 Call Trace: dump_stack_lvl+0xcd/0x134 __might_resched.cold+0x222/0x26b kmem_cache_alloc+0x2e7/0x3c0 update_qgroup_limit_item+0xe1/0x390 btrfs_qgroup_inherit+0x147b/0x1ee0 create_subvol+0x4eb/0x1710 btrfs_mksubvol+0xfe5/0x13f0 __btrfs_ioctl_snap_create+0x2b0/0x430 btrfs_ioctl_snap_create_v2+0x25a/0x520 btrfs_ioctl+0x2a1c/0x5ce0 __x64_sys_ioctl+0x193/0x200 do_syscall_64+0x35/0x80 Fix this by calling qgroup_dirty() on @dstqgroup, and update limit item in btrfs_run_qgroups() later outside of the spinlock context.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/01d7c41eac9129fba80d8aed0060caab4a7dbe09https://git.kernel.org/stable/c/044da1a371a0da579e805e89c96865f62d8f6f69https://git.kernel.org/stable/c/3c98e91be6aea4c7acf09da6eb0c107ea9186bb5https://git.kernel.org/stable/c/588ae4fdd8b11788a797776b10d6c44ae12bc133https://git.kernel.org/stable/c/89840b12c8fad7200eb6478525c13261512c01behttps://git.kernel.org/stable/c/8eb912af525042a7365295eb62f6d5270c2a6462https://git.kernel.org/stable/c/f4b930a1602b05e77fee31f9616599b25e910a86https://git.kernel.org/stable/c/f7e942b5bb35d8e3af54053d19a6bf04143a3955
2024-10-21
Published