CVE-2022-49831

MEDIUM

Linux Kernel < 5.15.79, 5.16.0-6.0.9, 5.12.0-5.12 - NULL Pointer Dereference in Btrfs Zoned Device Initialization

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: initialize device's zone info for seeding When performing seeding on a zoned filesystem it is necessary to initialize each zoned device's btrfs_zoned_device_info structure, otherwise mounting the filesystem will cause a NULL pointer dereference. This was uncovered by fstests' testcase btrfs/163.

Scores

CVSS v3 5.5
EPSS 0.0016
EPSS Percentile 5.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476
Status published
Products (12)
linux/Kernel 5.12.0 - 5.15.79linux
linux/Kernel 5.16.0 - 6.0.9linux
Linux/Linux < 5.12
Linux/Linux 5.12
Linux/Linux 5.15.79 - 5.15.*
Linux/Linux 6.0.9 - 6.0.*
Linux/Linux 6.1
Linux/Linux 7365104236ade0bf22edd7724c8fd438b0342ee4 - 544f38a738343d7e75f104e5e9d1ade58d8b71bd
Linux/Linux 7365104236ade0bf22edd7724c8fd438b0342ee4 - 91c38504e589dadbcde47b1cacdfc5b684154d44
Linux/Linux 7365104236ade0bf22edd7724c8fd438b0342ee4 - a8d1b1647bf8244a5f270538e9e636e2657fffa3
... and 2 more
Published May 01, 2025
Tracked Since Feb 18, 2026