Riskcovery

CVE-2022-49710

dm mirror log: round up region bitmap size to BITS_PER_LONG

State
Published
Severity
Not scored
Published
Feb 26, 2025
Updated
May 11, 2026
Reserved
Feb 26, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dm mirror log: round up region bitmap size to BITS_PER_LONG

The code in dm-log rounds up bitset_size to 32 bits. It then uses find_next_zero_bit_le on the allocated region. find_next_zero_bit_le accesses the bitmap using unsigned long pointers. So, on 64-bit architectures, it may access 4 bytes beyond the allocated size.

Fix this bug by rounding up bitset_size to BITS_PER_LONG.

This bug was found by running the lvm2 testsuite with kasan.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 29121bd0b00ebb9524971a583fea4a2f7afe8041 to before ae460312875159285cef5bf3dc654593f404a1efAffected
  • 29121bd0b00ebb9524971a583fea4a2f7afe8041 to before ba751f0d25f07aa21ce9b85372a3792bf7969d13Affected
  • 29121bd0b00ebb9524971a583fea4a2f7afe8041 to before 0d2209b54f1de0c2f99cab246d4cf2cfe24aaaa9Affected
  • 29121bd0b00ebb9524971a583fea4a2f7afe8041 to before 9a02f3275acc628c0d956be771405ced79ac36dfAffected
  • 29121bd0b00ebb9524971a583fea4a2f7afe8041 to before 85e123c27d5cbc22cfdc01de1e2ca1d9003a02d0Affected
LinuxLinux
  • 2.6.18Affected
  • before 2.6.18Not affected
  • 5.4.200 through 5.4.*Not affected
  • 5.10.124 through 5.10.*Not affected
  • 5.15.49 through 5.15.*Not affected
  • 5.18.6 through 5.18.*Not affected
  • 5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.