CVE-2022-49044
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
dm integrity: fix memory corruption when tag_size is less than digest size
In the Linux kernel, the following vulnerability has been resolved: dm integrity: fix memory corruption when tag_size is less than digest size It is possible to set up dm-integrity in such a way that the "tag_size" parameter is less than the actual digest size. In this situation, a part of the digest beyond tag_size is ignored. In this case, dm-integrity would write beyond the end of the ic->recalc_tags array and corrupt memory. The corruption happened in integrity_recalc->integrity_sector_checksum->crypto_shash_final. Fix this corruption by increasing the tags array so that it has enough padding at the end to accomodate the loop in integrity_recalc() being able to write a full digest size for the last member of the tags array.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| a3fcf7253139609bf9ff901fbf955fba047e75dd | affected | git | 6a95d91c0b315c965198f6ab7dec7c94129e17e0 | Unavailable | None listed |
| a3fcf7253139609bf9ff901fbf955fba047e75dd | affected | git | 7f84c937222944c03f4615ca4742df6bed0e5adf | Unavailable | None listed |
| a3fcf7253139609bf9ff901fbf955fba047e75dd | affected | git | cd02b2687d66f0a8e716384de4b9a0671331f1dc | Unavailable | None listed |
| a3fcf7253139609bf9ff901fbf955fba047e75dd | affected | git | 6b4bf97587ef6c1927a78934b700204920655123 | Unavailable | None listed |
| a3fcf7253139609bf9ff901fbf955fba047e75dd | affected | git | 4d485cf9b609709e45d5113e6e2b1b01254b2fe9 | Unavailable | None listed |
| a3fcf7253139609bf9ff901fbf955fba047e75dd | affected | git | 08c1af8f1c13bbf210f1760132f4df24d0ed46d6 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.19 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.19 | Unavailable | None listed |
| 4.19.240 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.190 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.112 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.35 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 5.17.4 | unaffected | semver | Unavailable | 5.17.* | None listed |
| 5.18 | unaffected | original_commit_for_fix | Unavailable | * | None listed |