CVE-2022-49413

bfq: Update cgroup information before merging bio

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

bfq: Update cgroup information before merging bio

When the process is migrated to a different cgroup (or in case of writeback just starts submitting bios associated with a different cgroup) bfq_merge_bio() can operate with stale cgroup information in bic. Thus the bio can be merged to a request from a different cgroup or it can result in merging of bfqqs for different cgroups or bfqqs of already dead cgroups and causing possible use-after-free issues. Fix the problem by updating cgroup information in bfq_merge_bio().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	e21b7a0b988772e82e7147e1c659a5afe2ae003c to before da9f3025d595956410ceaab2bea01980d7775948Affected e21b7a0b988772e82e7147e1c659a5afe2ae003c to before b06691af08b41dfd81052a3362514d9827b44bb1Affected e21b7a0b988772e82e7147e1c659a5afe2ae003c to before e8821f45612f2e6d9adb9c6ba0fb4184f57692aaAffected e21b7a0b988772e82e7147e1c659a5afe2ae003c to before d9165200c5627a2cf4408eefabdf0058bdf95e1aAffected e21b7a0b988772e82e7147e1c659a5afe2ae003c to before 2a1077f17169a6059992a0bbdb330e0abad1e6d9Affected e21b7a0b988772e82e7147e1c659a5afe2ae003c to before ea591cd4eb270393810e7be01feb8fde6a34fbbeAffected
LinuxLinux	4.12Affected before 4.12Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

e21b7a0b988772e82e7147e1c659a5afe2ae003c to before da9f3025d595956410ceaab2bea01980d7775948Affected
e21b7a0b988772e82e7147e1c659a5afe2ae003c to before b06691af08b41dfd81052a3362514d9827b44bb1Affected
e21b7a0b988772e82e7147e1c659a5afe2ae003c to before e8821f45612f2e6d9adb9c6ba0fb4184f57692aaAffected
e21b7a0b988772e82e7147e1c659a5afe2ae003c to before d9165200c5627a2cf4408eefabdf0058bdf95e1aAffected
e21b7a0b988772e82e7147e1c659a5afe2ae003c to before 2a1077f17169a6059992a0bbdb330e0abad1e6d9Affected
e21b7a0b988772e82e7147e1c659a5afe2ae003c to before ea591cd4eb270393810e7be01feb8fde6a34fbbeAffected

LinuxLinux

4.12Affected
before 4.12Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.