CVE-2022-49912

btrfs: fix ulist leaks in error paths of qgroup self tests

State: Published
Severity: Not scored
Published: May 1, 2025
Updated: May 11, 2026
Reserved: May 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix ulist leaks in error paths of qgroup self tests

In the test_no_shared_qgroup() and test_multiple_refs() qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from the test function without freeing the "old_roots" ulist that was allocated by the previous calls to btrfs_find_all_roots(). Fix that by calling ulist_free() before returning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	442244c9633292a147ab2b29e7007a7c8a3909b2 to before d81370396025cf63a7a1b5f8bb25a3479203b2caAffected 442244c9633292a147ab2b29e7007a7c8a3909b2 to before 3f58283d83a588ff5da62fc150de19e798ed2ec2Affected 442244c9633292a147ab2b29e7007a7c8a3909b2 to before 203204798831c35d855ecc6417d98267d2d2184bAffected 442244c9633292a147ab2b29e7007a7c8a3909b2 to before 5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9Affected 442244c9633292a147ab2b29e7007a7c8a3909b2 to before 0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84Affected 442244c9633292a147ab2b29e7007a7c8a3909b2 to before f46ea5fa3320dca4fe0c0926b49a5f14cb85de62Affected 442244c9633292a147ab2b29e7007a7c8a3909b2 to before da7003434bcab0ae9aba3f2c003e734cae093326Affected 442244c9633292a147ab2b29e7007a7c8a3909b2 to before d37de92b38932d40e4a251e876cc388f9aee5f42Affected
LinuxLinux	4.2Affected before 4.2Not affected 4.9.333 through 4.9.Not affected 4.14.299 through 4.14.Not affected 4.19.265 through 4.19.Not affected 5.4.224 through 5.4.Not affected 5.10.154 through 5.10.Not affected 5.15.78 through 5.15.Not affected 6.0.8 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

442244c9633292a147ab2b29e7007a7c8a3909b2 to before d81370396025cf63a7a1b5f8bb25a3479203b2caAffected
442244c9633292a147ab2b29e7007a7c8a3909b2 to before 3f58283d83a588ff5da62fc150de19e798ed2ec2Affected
442244c9633292a147ab2b29e7007a7c8a3909b2 to before 203204798831c35d855ecc6417d98267d2d2184bAffected
442244c9633292a147ab2b29e7007a7c8a3909b2 to before 5d1a47ebf84540e40b5b43fc21aef0d6c0f627d9Affected
442244c9633292a147ab2b29e7007a7c8a3909b2 to before 0a0dead4ad1a2e2a9bdf133ef45111d7c8daef84Affected
442244c9633292a147ab2b29e7007a7c8a3909b2 to before f46ea5fa3320dca4fe0c0926b49a5f14cb85de62Affected
442244c9633292a147ab2b29e7007a7c8a3909b2 to before da7003434bcab0ae9aba3f2c003e734cae093326Affected
442244c9633292a147ab2b29e7007a7c8a3909b2 to before d37de92b38932d40e4a251e876cc388f9aee5f42Affected

LinuxLinux

4.2Affected
before 4.2Not affected
4.9.333 through 4.9.*Not affected
4.14.299 through 4.14.*Not affected
4.19.265 through 4.19.*Not affected
5.4.224 through 5.4.*Not affected
5.10.154 through 5.10.*Not affected
5.15.78 through 5.15.*Not affected
6.0.8 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.