CVE-2022-49147

MEDIUM EPSS 14.9%
Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blk_alloc_ext_minor() ida_alloc_range(..., min, max, ...) returns values from min to max, inclusive. So, NR_EXT_DEVT is a valid idx returned by blk_alloc_ext_minor(). This is an issue because in device_add_disk(), this value is used in: ddev->devt = MKDEV(disk->major, disk->first_minor); and NR_EXT_DEVT is '(1 << MINORBITS)'. So, should 'disk->first_minor' be NR_EXT_DEVT, it would overflow.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
14.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥5.11  –  <5.15.33
linuxlinux_kernel*≥5.16  –  <5.16.19
linuxlinux_kernel*≥5.17  –  <5.17.2

References 4

  • git.kernel.org https://git.kernel.org/stable/c/0f8cf8f5ccbad25ed6828875b222dbab29d5c272
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5b9ac3727e4abb11c9cfbe9c0781fc05dfdd7cfb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d1868328dec5ae2cf210111025fcbc71f78dd5ca
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fbe2cc4525480ddd20c866bb5c0578071e01451a
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0f8cf8f5ccbad25ed6828875b222dbab29d5c272
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5b9ac3727e4abb11c9cfbe9c0781fc05dfdd7cfb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d1868328dec5ae2cf210111025fcbc71f78dd5ca
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fbe2cc4525480ddd20c866bb5c0578071e01451a
    Patch