CVE-2022-49996

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() In btrfs_get_dev_args_from_path(), btrfs_get_bdev_and_sb() can fail if the path is invalid. In this case, btrfs_get_dev_args_from_path() returns directly without freeing args->uuid and args->fsid allocated before, which causes memory leak. To fix these possible leaks, when btrfs_get_bdev_and_sb() fails, btrfs_put_dev_args_from_path() is called to clean up the memory.

Reserved 2025-06-18 | Published 2025-06-18 | Updated 2025-06-18 | Assigner Linux

Product status

Default status
unaffected

321a81835b4aed4f717f89921286f6544ffa8be9 before 5f52402c77013e4a826394b807dd5ea4dc83bd72
affected

faa775c41d655a4786e9d53cb075a77bb5a75f66 before 4b124ad87244cd7f0883c5eaa38d2326b2154cad
affected

faa775c41d655a4786e9d53cb075a77bb5a75f66 before 9ea0106a7a3d8116860712e3f17cd52ce99f6707
affected

Default status
affected

5.16
affected

Any version before 5.16
unaffected

5.15.64
unaffected

5.19.6
unaffected

6.0
unaffected

References

git.kernel.org/...c/5f52402c77013e4a826394b807dd5ea4dc83bd72

git.kernel.org/...c/4b124ad87244cd7f0883c5eaa38d2326b2154cad

git.kernel.org/...c/9ea0106a7a3d8116860712e3f17cd52ce99f6707

cve.org (CVE-2022-49996)

nvd.nist.gov (CVE-2022-49996)

Download JSON