NetSight
IP …
medium5.5

CVE-2022-49912

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ulist leaks in error paths of qgroup self tests In the test_no_shared_qgroup() a…

Impact

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix ulist leaks in error paths of qgroup self tests In the test_no_shared_qgroup() and test_multiple_refs() qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from the test function without freeing the "old_roots" ulist that was allocated by the previous calls to btrfs_find_all_roots(). Fix that by calling ulist_free() before returning.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.2 before 4.9.333
from 4.10 before 4.14.299
from 4.15 before 4.19.265
from 4.20 before 5.4.224
from 5.5 before 5.10.154
from 5.11 before 5.15.78

Weakness classification

CWE-401

References