[SRU][F][PATCH 0/1] CVE-2022-48674

Juerg Haefliger juerg.haefliger at canonical.com
Fri Jun 28 08:23:46 UTC 2024


https://ubuntu.com/security/CVE-2022-48674

[ Impact ]

During stress testing with CONFIG_SMP disabled, KASAN reports as below:

==================================================================
BUG: KASAN: use-after-free in __mutex_lock+0xe5/0xc30
Read of size 8 at addr ffff8881094223f8 by task stress/7789


[ Test Case ]

Compile tested only.


[ Where Problems Could Occur ]

Isolated to the erofs driver. Only users of that filesystem may encounter issue. But
CONFIG_SMP is enabled in Ubuntu so this change should not make any difference at all.


Gao Xiang (1):
  erofs: fix pcluster use-after-free on UP platforms

 fs/erofs/internal.h | 29 -----------------------------
 1 file changed, 29 deletions(-)

-- 
2.40.1




More information about the kernel-team mailing list