Riskcovery

CVE-2022-49747

erofs/zmap.c: Fix incorrect offset calculation

State
Published
Severity
Not scored
Published
Mar 27, 2025
Updated
May 11, 2026
Reserved
Mar 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

erofs/zmap.c: Fix incorrect offset calculation

Effective offset to add to length was being incorrectly calculated, which resulted in iomap->length being set to 0, triggering a WARN_ON in iomap_iter_done().

Fix that, and describe it in comments.

This was reported as a crash by syzbot under an issue about a warning encountered in iomap_iter_done(), but unrelated to erofs.

C reproducer: https://syzkaller.appspot.com/text?tag=ReproC&x=1037a6b2880000 Kernel config: https://syzkaller.appspot.com/text?tag=KernelConfig&x=e2021a61197ebe02 Dashboard link: https://syzkaller.appspot.com/bug?extid=a8e049cd3abd342936b6

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • eadcd6b5a1eb39866ab8d8a3e4f2e51bc51a2350 to before 2144859229c1e74f52d3ea067338d314a83a8afbAffected
  • eadcd6b5a1eb39866ab8d8a3e4f2e51bc51a2350 to before 9f31d8c889d9a4e47bfcc6c4537d0c9f89fe582cAffected
  • eadcd6b5a1eb39866ab8d8a3e4f2e51bc51a2350 to before 6acd87d50998ef0afafc441613aeaf5a8f5c9effAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.92 through 5.15.*Not affected
  • 6.1.10 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.