CVE-2022-49220 Details
Description
In the Linux kernel, the following vulnerability has been resolved: dax: make sure inodes are flushed before destroy cache A bug can be triggered by following command $ modprobe nd_pmem && modprobe -r nd_pmem [ 10.060014] BUG dax_cache (Not tainted): Objects remaining in dax_cache on __kmem_cache_shutdown() [ 10.060938] Slab 0x0000000085b729ac objects=9 used=1 fp=0x000000004f5ae469 flags=0x200000000010200(slab|head|node) [ 10.062433] Call Trace: [ 10.062673] dump_stack_lvl+0x34/0x44 [ 10.062865] slab_err+0x90/0xd0 [ 10.063619] __kmem_cache_shutdown+0x13b/0x2f0 [ 10.063848] kmem_cache_destroy+0x4a/0x110 [ 10.064058] __x64_sys_delete_module+0x265/0x300 This is caused by dax_fs_exit() not flushing inodes before destroy cache. To fix this issue, call rcu_barrier() before destroy cache.
A vulnerability in the Linux kernel's DAX (Direct Access) feature has been identified, where inodes are not properly flushed before the DAX cache is destroyed. This issue can be triggered by loading the 'nd_pmem' module and then removing it, which exposes remaining objects in the DAX cache that should have been cleared. The vulnerability arises because the 'dax_fs_exit()' function fails to flush inodes prior to cache destruction, leading to a potential memory management issue.
The vulnerability can be addressed by modifying the 'dax_fs_exit()' function to include a call to 'rcu_barrier()' before the cache destruction process.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/770d42fff12d8595adda9025a0b92091f543e775 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a7e8de822e0b1979f08767c751f6c8a9c1d4ad86 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b786abe7c67c6ef71410c8e23292b3091d616ad1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/e2951eaa9398415ac054b7bd80b8163b6838ead4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ec376f5c11c88c0215d173599db8449cd4196759 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f2a1e0eb70c2d954176c07d75d28742bde30e9f3 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.12, < 5.4.189 >= 5.5, < 5.10.110 >= 5.11, < 5.15.33 >= 5.16, < 5.16.19 >= 5.17, < 5.17.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 21, 2025 | Initial Analysis | [email protected] |
| Feb 26, 2025 | New CVE Received | kernel.org |