Riskcovery

CVE-2022-49147

block: Fix the maximum minor value is blk_alloc_ext_minor()

State
Published
Severity
Not scored
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

block: Fix the maximum minor value is blk_alloc_ext_minor()

ida_alloc_range(..., min, max, ...) returns values from min to max, inclusive.

So, NR_EXT_DEVT is a valid idx returned by blk_alloc_ext_minor().

This is an issue because in device_add_disk(), this value is used in: ddev->devt = MKDEV(disk->major, disk->first_minor); and NR_EXT_DEVT is '(1 << MINORBITS)'.

So, should 'disk->first_minor' be NR_EXT_DEVT, it would overflow.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 22ae8ce8b89241c94ac00c237752c0ffa37ba5ae to before 5b9ac3727e4abb11c9cfbe9c0781fc05dfdd7cfbAffected
  • 22ae8ce8b89241c94ac00c237752c0ffa37ba5ae to before 0f8cf8f5ccbad25ed6828875b222dbab29d5c272Affected
  • 22ae8ce8b89241c94ac00c237752c0ffa37ba5ae to before fbe2cc4525480ddd20c866bb5c0578071e01451aAffected
  • 22ae8ce8b89241c94ac00c237752c0ffa37ba5ae to before d1868328dec5ae2cf210111025fcbc71f78dd5caAffected
LinuxLinux
  • 5.11Affected
  • before 5.11Not affected
  • 5.15.33 through 5.15.*Not affected
  • 5.16.19 through 5.16.*Not affected
  • 5.17.2 through 5.17.*Not affected
  • 5.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.