CVE-2022-49044
Description
In the Linux kernel, the following vulnerability has been resolved: dm integrity: fix memory corruption when tag_size is less than digest size It is possible to set up dm-integrity in such a way that the "tag_size" parameter is less than the actual digest size. In this situation, a part of the digest beyond tag_size is ignored. In this case, dm-integrity would write beyond the end of the ic->recalc_tags array and corrupt memory. The corruption happened in integrity_recalc->integrity_sector_checksum->crypto_shash_final. Fix this corruption by increasing the tags array so that it has enough padding at the end to accomodate the loop in integrity_recalc() being able to write a full digest size for the last member of the tags array.
How to fix
- linux linux_kernel4.19.240, 5.4.190, 5.10.112, 5.15.35, 5.17.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.12 ≤ v < 4.19.240, 4.20 ≤ v < 5.4.190, 5.5 ≤ v < 5.10.112, 5.11 ≤ v < 5.15.35, 5.16 ≤ v < 5.17.4, 5.18 | 4.19.240, 5.4.190, 5.10.112, 5.15.35, 5.17.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.