In the Linux kernel, the following vulnerability has been resolved:
bfq: Update cgroup information before merging bio
When the process is migrated to a different cgroup (or in case of writeback just starts submitting bios associated with a different cgroup) bfqmergebio() can operate with stale cgroup information in bic. Thus the bio can be merged to a request from a different cgroup or it can result in merging of bfqqs for different cgroups or bfqqs of already dead cgroups and causing possible use-after-free issues. Fix the problem by updating cgroup information in bfqmergebio().
{ "vanir_signatures": [ { "signature_type": "Line", "target": { "file": "block/bfq-iosched.c" }, "id": "CVE-2022-49413-1591ebc7", "digest": { "threshold": 0.9, "line_hashes": [ "304149099149880416661890267210605343348", "232223226313552279203181039938573552826", "329474777800983150177957347675255262499", "177735160295010528721779453724822428217", "212957548564435710539571046022236763548", "321391206559103403706814541730860877271", "225858159824242881877399423888651647775" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b06691af08b41dfd81052a3362514d9827b44bb1", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "block/bfq-iosched.c", "function": "bfq_bio_merge" }, "id": "CVE-2022-49413-190aeb9d", "digest": { "length": 515.0, "function_hash": "247649630151377374467400550406335414991" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da9f3025d595956410ceaab2bea01980d7775948", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "block/bfq-iosched.c", "function": "bfq_bio_merge" }, "id": "CVE-2022-49413-36a675e9", "digest": { "length": 485.0, "function_hash": "138062665156638810961719909473952615257" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9165200c5627a2cf4408eefabdf0058bdf95e1a", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "block/bfq-iosched.c" }, "id": "CVE-2022-49413-a27fba6b", "digest": { "threshold": 0.9, "line_hashes": [ "24081971064588733538137596052442523835", "232223226313552279203181039938573552826", "329474777800983150177957347675255262499", "177735160295010528721779453724822428217", "212957548564435710539571046022236763548", "321391206559103403706814541730860877271", "211688915157401127300010436165507347263" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9165200c5627a2cf4408eefabdf0058bdf95e1a", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "block/bfq-iosched.c", "function": "bfq_bio_merge" }, "id": "CVE-2022-49413-a9a073eb", "digest": { "length": 515.0, "function_hash": "247649630151377374467400550406335414991" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b06691af08b41dfd81052a3362514d9827b44bb1", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "block/bfq-iosched.c", "function": "bfq_bio_merge" }, "id": "CVE-2022-49413-ae229944", "digest": { "length": 485.0, "function_hash": "138062665156638810961719909473952615257" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ea591cd4eb270393810e7be01feb8fde6a34fbbe", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "block/bfq-iosched.c" }, "id": "CVE-2022-49413-bc1e1ecb", "digest": { "threshold": 0.9, "line_hashes": [ "304149099149880416661890267210605343348", "232223226313552279203181039938573552826", "329474777800983150177957347675255262499", "177735160295010528721779453724822428217", "212957548564435710539571046022236763548", "321391206559103403706814541730860877271", "211688915157401127300010436165507347263" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8821f45612f2e6d9adb9c6ba0fb4184f57692aa", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "block/bfq-iosched.c", "function": "bfq_bio_merge" }, "id": "CVE-2022-49413-c0abfc32", "digest": { "length": 485.0, "function_hash": "138062665156638810961719909473952615257" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a1077f17169a6059992a0bbdb330e0abad1e6d9", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "block/bfq-iosched.c" }, "id": "CVE-2022-49413-c946ce9c", "digest": { "threshold": 0.9, "line_hashes": [ "24081971064588733538137596052442523835", "232223226313552279203181039938573552826", "329474777800983150177957347675255262499", "177735160295010528721779453724822428217", "212957548564435710539571046022236763548", "321391206559103403706814541730860877271", "211688915157401127300010436165507347263" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a1077f17169a6059992a0bbdb330e0abad1e6d9", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Function", "target": { "file": "block/bfq-iosched.c", "function": "bfq_bio_merge" }, "id": "CVE-2022-49413-d2cbb3b3", "digest": { "length": 515.0, "function_hash": "185385206491964775152490226324240059337" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8821f45612f2e6d9adb9c6ba0fb4184f57692aa", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "block/bfq-iosched.c" }, "id": "CVE-2022-49413-e69e3928", "digest": { "threshold": 0.9, "line_hashes": [ "24081971064588733538137596052442523835", "232223226313552279203181039938573552826", "329474777800983150177957347675255262499", "177735160295010528721779453724822428217", "212957548564435710539571046022236763548", "321391206559103403706814541730860877271", "211688915157401127300010436165507347263" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ea591cd4eb270393810e7be01feb8fde6a34fbbe", "deprecated": false, "signature_version": "v1" }, { "signature_type": "Line", "target": { "file": "block/bfq-iosched.c" }, "id": "CVE-2022-49413-ec456044", "digest": { "threshold": 0.9, "line_hashes": [ "304149099149880416661890267210605343348", "232223226313552279203181039938573552826", "329474777800983150177957347675255262499", "177735160295010528721779453724822428217", "212957548564435710539571046022236763548", "321391206559103403706814541730860877271", "225858159824242881877399423888651647775" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da9f3025d595956410ceaab2bea01980d7775948", "deprecated": false, "signature_version": "v1" } ] }