CVE-2022-49147 - block: Fix the maximum minor value is blk_alloc_ext_minor()

Back Back to CVE browser

MEDIUM

block: Fix the maximum minor value is blk_alloc_ext_minor()

Published Feb 26, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.26%

Description

ida_alloc_range(..., min, max, ...) returns values from min to max, inclusive.

So, NR_EXT_DEVT is a valid idx returned by blk_alloc_ext_minor().

This is an issue because in device_add_disk(), this value is used in: ddev->devt = MKDEV(disk->major, disk->first_minor); and NR_EXT_DEVT is '(1 << MINORBITS)'.

So, should 'disk->first_minor' be NR_EXT_DEVT, it would overflow.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.11
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.11
- Version
  5.15.33
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  5.16.19
  Status
  unaffected
  Constraints
  <=5.16.*
- Version
  5.17.2
  Status
  unaffected
  Constraints
  <=5.17.*
- Version
  5.18
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.11	affected	-
0	unaffected	<5.11
5.15.33	unaffected	<=5.15.*
5.16.19	unaffected	<=5.16.*
5.17.2	unaffected	<=5.17.*
5.18	unaffected	<=*

Red Hat Enterprise Linux 9

kernel-0:5.14.0-162.6.1.el9_1

Fixed · RHSA-2022:8267
Red Hat Enterprise Linux 9

kernel-0:5.14.0-162.6.1.el9_1

Fixed · RHSA-2022:8267
Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Out of support scope
Red Hat Enterprise Linux 7

kernel-rt

Out of support scope
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 9	kernel-0:5.14.0-162.6.1.el9_1	Fixed	RHSA-2022:8267
Red Hat Enterprise Linux 9	kernel-0:5.14.0-162.6.1.el9_1	Fixed	RHSA-2022:8267
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 7	kernel-rt	Out of support scope	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2022-49147		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2348106		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-55078		Advisory
https://git.kernel.org/stable/c/0f8cf8f5ccbad25ed6828875b222dbab29d5c272		Patch
https://git.kernel.org/stable/c/5b9ac3727e4abb11c9cfbe9c0781fc05dfdd7cfb		Patch
https://git.kernel.org/stable/c/d1868328dec5ae2cf210111025fcbc71f78dd5ca		Patch
https://git.kernel.org/stable/c/fbe2cc4525480ddd20c866bb5c0578071e01451a		Patch
https://lore.kernel.org/linux-cve-announce/2025022608-CVE-2022-49147-7f2f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2022-49147
https://www.cve.org/CVERecord?id=CVE-2022-49147