CVE-2022-49044

Source
https://cve.org/CVERecord?id=CVE-2022-49044
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49044.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-49044
Downstream
Related
Published
2025-02-26T01:54:21.389Z
Modified
2026-04-11T12:43:28.454020Z
Summary
dm integrity: fix memory corruption when tag_size is less than digest size
Details

In the Linux kernel, the following vulnerability has been resolved:

dm integrity: fix memory corruption when tag_size is less than digest size

It is possible to set up dm-integrity in such a way that the "tagsize" parameter is less than the actual digest size. In this situation, a part of the digest beyond tagsize is ignored.

In this case, dm-integrity would write beyond the end of the ic->recalctags array and corrupt memory. The corruption happened in integrityrecalc->integritysectorchecksum->cryptoshashfinal.

Fix this corruption by increasing the tags array so that it has enough padding at the end to accomodate the loop in integrity_recalc() being able to write a full digest size for the last member of the tags array.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49044.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7eada909bfd7ac90a4522e56aa3179d1fd68cd14
Fixed
6a95d91c0b315c965198f6ab7dec7c94129e17e0
Fixed
7f84c937222944c03f4615ca4742df6bed0e5adf
Fixed
cd02b2687d66f0a8e716384de4b9a0671331f1dc
Fixed
6b4bf97587ef6c1927a78934b700204920655123
Fixed
4d485cf9b609709e45d5113e6e2b1b01254b2fe9
Fixed
08c1af8f1c13bbf210f1760132f4df24d0ed46d6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49044.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.12.0
Fixed
4.19.240
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.190
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.112
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.35
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
5.17.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49044.json"