Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-48747

block: Fix wrong offset in bio_truncate()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in bio_truncate() bio_truncate() clears the buffer outside of last block of bdev, however current bio_truncate() is using the wrong offset of page. So it can return the uninitialized data. This happened when both of truncated/corrupted FS and userspace (via bdev) are trying to read the last of bdev.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 943cd69efac437d82a7aea0659fccbcc071730de to < 6cbf4c731d7812518cd857c2cfc3da9fd120f6aeaffected
  • 85a8ce62c2eabe28b9d76ca4eecf37922402df93 to < b63e120189fd92aff00096d11e2fc5253f60248baffected
  • 85a8ce62c2eabe28b9d76ca4eecf37922402df93 to < 4633a79ff8bc82770486a063a08b55e5162521d8affected
  • 85a8ce62c2eabe28b9d76ca4eecf37922402df93 to < 941d5180c430ce5b0f7a3622ef9b76077bfa3d82affected
  • 85a8ce62c2eabe28b9d76ca4eecf37922402df93 to < 3ee859e384d453d6ac68bfd5971f630d9fa46ad3affected
  • 5.4.9 to < 5.4.176affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 5.4.176 to ≤ 5.4.*unaffected
  • 5.10.96 to ≤ 5.10.*unaffected
  • 5.15.19 to ≤ 5.15.*unaffected
  • 5.16.5 to ≤ 5.16.*unaffected
  • 5.17 to ≤ *unaffected

References