Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2022-49075: Linux kernel Btrfs quota can be bypassed with large files
CVE-2022-49075 · published 1 year ago
Summary
The Btrfs file system in the Linux kernel may miscalculate space reservations when a single file larger than 4 GB is pre‑allocated, allowing it to exceed the set quota limit. This can let users store more data than the quota permits, potentially causing unexpected disk‑space usage. Apply the latest kernel updates that include the fix to ensure quotas work correctly.
What to do
- Update canonical linux-azure to version 4.15.0-1146.161~14.04.1.
- Update canonical linux-aws-hwe to version 4.15.0-1137.148~16.04.1.
- Update canonical linux-azure to version 4.15.0-1146.161~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1131.147~16.04.1.
- Update canonical linux-hwe to version 4.15.0-189.200~16.04.1.
- Update canonical linux-oracle to version 4.15.0-1102.113~16.04.1.
- Update canonical linux to version 4.15.0-189.200.
- Update canonical linux-aws to version 4.15.0-1137.148.
- Update canonical linux-aws-5.4 to version 5.4.0-1078.84~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1146.161.
- Update canonical linux-azure-5.4 to version 5.4.0-1083.87~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1131.147.
- Update canonical linux-gcp-5.4 to version 5.4.0-1078.84~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-117.132~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1028.32~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1123.128.
- Update canonical linux-oracle to version 4.15.0-1102.113.
- Update canonical linux-oracle-5.4 to version 5.4.0-1076.83~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1065.75~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2076.81.
- Update canonical linux-azure-fips to version 4.15.0-2057.63.
- Update canonical linux-fips to version 4.15.0-1094.105.
- Update canonical linux-gcp-fips to version 4.15.0-2041.46.
- Update canonical linux to version 5.4.0-117.132.
- Update canonical linux-aws to version 5.4.0-1078.84.
- Update canonical linux-azure to version 5.4.0-1083.87.
- Update canonical linux-azure-5.15 to version 5.15.0-1008.9~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1040.44.
- Update canonical linux-gcp to version 5.4.0-1078.84.
- Update canonical linux-hwe-5.15 to version 5.15.0-41.44~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1026.29.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1008.11~20.04.1.
- Update canonical linux-iot to version 5.4.0-1004.6.
- Update canonical linux-kvm to version 5.4.0-1068.72.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-42.45~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1076.83.
- Update canonical linux-raspi to version 5.4.0-1065.75.
- Update canonical linux-aws-fips to version 5.4.0-1078.84+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1083.87+fips1.
- Update canonical linux-fips to version 5.4.0-1054.61.
- Update canonical linux-gcp-fips to version 5.4.0-1078.84+fips1.
- Update canonical linux to version 5.15.0-37.39.
- Update canonical linux-aws to version 5.15.0-1011.14.
- Update canonical linux-azure to version 5.15.0-1010.12.
- Update canonical linux-gcp to version 5.15.0-1008.12.
- Update canonical linux-gke to version 5.15.0-1008.10.
- Update canonical linux-ibm to version 5.15.0-1007.8.
- Update canonical linux-intel-iotg to version 5.15.0-1008.11.
- Update canonical linux-kvm to version 5.15.0-1010.11.
- Update canonical linux-lowlatency to version 5.15.0-37.39.
- Update canonical linux-oracle to version 5.15.0-1009.12.
- Update canonical linux-raspi to version 5.15.0-1011.13.
- Update canonical linux-realtime to version 5.15.0-1014.14.
- Update linux kernel to version 5.17.3.
- Update debian linux to version 5.17.3-1.
- Update linux linux to version 0355387ea5b02d353c9415613fab908fac5c52a6 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
< 4.14.276 >= 4.15, < 4.19.238 >= 4.20, < 5.4.189 >= 5.5, < 5.10.111 >= 5.11, < 5.15.34 >= 5.16, < 5.16.20 >= 5.17, < 5.17.3 5.18 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1146.161~14.04.1 Fix: upgrade to 4.15.0-1146.161~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| – | linux | linux |
< 0355387ea5b02d353c9415613fab908fac5c52a6 4.13 |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1137.148~16.04.1 Fix: upgrade to 4.15.0-1137.148~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1146.161~16.04.1 Fix: upgrade to 4.15.0-1146.161~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1131.147~16.04.1 Fix: upgrade to 4.15.0-1131.147~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-189.200~16.04.1 Fix: upgrade to 4.15.0-189.200~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1102.113~16.04.1 Fix: upgrade to 4.15.0-1102.113~16.04.1
|
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-189.200 Fix: upgrade to 4.15.0-189.200
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1137.148 Fix: upgrade to 4.15.0-1137.148
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1078.84~18.04.1 Fix: upgrade to 5.4.0-1078.84~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1146.161 Fix: upgrade to 4.15.0-1146.161
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1083.87~18.04.1 Fix: upgrade to 5.4.0-1083.87~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1131.147 Fix: upgrade to 4.15.0-1131.147
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1078.84~18.04.1 Fix: upgrade to 5.4.0-1078.84~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-117.132~18.04.1 Fix: upgrade to 5.4.0-117.132~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1028.32~18.04.1 Fix: upgrade to 5.4.0-1028.32~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1123.128 Fix: upgrade to 4.15.0-1123.128
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1102.113 Fix: upgrade to 4.15.0-1102.113
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1076.83~18.04.1 Fix: upgrade to 5.4.0-1076.83~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1065.75~18.04.1 Fix: upgrade to 5.4.0-1065.75~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2076.81 Fix: upgrade to 4.15.0-2076.81
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2057.63 Fix: upgrade to 4.15.0-2057.63
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1094.105 Fix: upgrade to 4.15.0-1094.105
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2041.46 Fix: upgrade to 4.15.0-2041.46
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
Showing 50 of 153. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-117.132 Fix: upgrade to 5.4.0-117.132
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1078.84 Fix: upgrade to 5.4.0-1078.84
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1083.87 Fix: upgrade to 5.4.0-1083.87
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1008.9~20.04.1 Fix: upgrade to 5.15.0-1008.9~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1040.44 Fix: upgrade to 5.4.0-1040.44
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1078.84 Fix: upgrade to 5.4.0-1078.84
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-41.44~20.04.1 Fix: upgrade to 5.15.0-41.44~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1026.29 Fix: upgrade to 5.4.0-1026.29
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1008.11~20.04.1 Fix: upgrade to 5.15.0-1008.11~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1004.6 Fix: upgrade to 5.4.0-1004.6
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1068.72 Fix: upgrade to 5.4.0-1068.72
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-42.45~20.04.1 Fix: upgrade to 5.15.0-42.45~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1076.83 Fix: upgrade to 5.4.0-1076.83
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1065.75 Fix: upgrade to 5.4.0-1065.75
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1078.84+fips1 Fix: upgrade to 5.4.0-1078.84+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1083.87+fips1 Fix: upgrade to 5.4.0-1083.87+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1054.61 Fix: upgrade to 5.4.0-1054.61
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1078.84+fips1 Fix: upgrade to 5.4.0-1078.84+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-37.39 Fix: upgrade to 5.15.0-37.39
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1011.14 Fix: upgrade to 5.15.0-1011.14
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1010.12 Fix: upgrade to 5.15.0-1010.12
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1008.12 Fix: upgrade to 5.15.0-1008.12
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1008.10 Fix: upgrade to 5.15.0-1008.10
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1007.8 Fix: upgrade to 5.15.0-1007.8
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1008.11 Fix: upgrade to 5.15.0-1008.11
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1010.11 Fix: upgrade to 5.15.0-1010.11
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-37.39 Fix: upgrade to 5.15.0-37.39
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1009.12 Fix: upgrade to 5.15.0-1009.12
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1011.13 Fix: upgrade to 5.15.0-1011.13
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1014.14 Fix: upgrade to 5.15.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:26.04 | canonical | linux-nvidia | All versions |
| Linux | linux | kernel |
>= 5.17.0, < 5.17.3 Fix: upgrade to 5.17.3
|
| Debian:12 | debian | linux |
< 5.17.3-1 Fix: upgrade to 5.17.3-1
|
Original advisory text
btrfs: fix qgroup reserve overflow the qgroup limit
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extent_changeset->bytes_changed in qgroup_reserve_data() to record how many bytes we set for EXTENT_QGROUP_RESERVED state. Currently the bytes_changed is set as "unsigned int", and it will overflow if we try to fallocate a range larger than 4GiB. The result is we reserve less bytes and eventually break the qgroup limit. Unlike regular buffered/direct write, which we use one changeset for each ordered extent, which can never be larger than 256M. For fallocate, we use one changeset for the whole range, thus it no longer respects the 256M per extent limit, and caused the problem. The following example test script reproduces the problem: $ cat qgroup-overflow.sh #!/bin/bash DEV=/dev/sdj MNT=/mnt/sdj mkfs.btrfs -f $DEV mount $DEV $MNT # Set qgroup limit to 2GiB. btrfs quota enable $MNT btrfs qgroup limit 2G $MNT # Try to fallocate a 3GiB file. This should fail. echo echo "Try to fallocate a 3GiB file..." fallocate -l 3G $MNT/3G.file # Try to fallocate a 5GiB file. echo echo "Try to fallocate a 5GiB file..." fallocate -l 5G $MNT/5G.file # See we break the qgroup limit. echo sync btrfs qgroup show -r $MNT umount $MNT When running the test: $ ./qgroup-overflow.sh (...) Try to fallocate a 3GiB file... fallocate: fallocate failed: Disk quota exceeded Try to fallocate a 5GiB file... qgroupid rfer excl max_rfer -------- ---- ---- -------- 0/5 5.00GiB 5.00GiB 2.00GiB Since we have no control of how bytes_changed is used, it's better to set it to u64.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49075... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49075 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://www.cve.org/CVERecord?id=CVE-2022-49075 Third Party Advisory
- https://ubuntu.com/security/CVE-2022-49075 Third Party Advisory
- https://git.kernel.org/linus/b642b52d0b50f4d398cb4293f64992d0eed2e2ce Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2022-49075 Vendor Advisory
- https://git.kernel.org/stable/c/82ae73ac963cee877ce34f7c31b2b456b516e96c URL
- https://git.kernel.org/stable/c/b642b52d0b50f4d398cb4293f64992d0eed2e2ce URL
- https://git.kernel.org/stable/c/f3d97b22a708bf9e3f3ac2ba232bcefd0b0c136b URL
- https://git.kernel.org/stable/c/0355387ea5b02d353c9415613fab908fac5c52a6 URL
- https://git.kernel.org/stable/c/44277c50fdba5019ca25bfad1b71e2561b0de11b URL
- https://git.kernel.org/stable/c/4b98799e181b4326a613108cf37acc1f55d21b45 URL
- https://git.kernel.org/stable/c/6bfff81286d4491f02dad7814bae5c77c9ad2320 URL
- https://git.kernel.org/stable/c/7941b74ed49b6db25efbef2256ebef843c11a010 URL
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-190Integer Overflow
Timeline
Published26 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-49075 · OSV
UBUNTU-CVE-2022-49075 · OSV
CVE-2022-49075 · NVD
CVE-2022-49075 · MITRE
DEBIAN-CVE-2022-49075 · OSV
Track software like this
Free during beta