CVE-2022-49710 Details
Description
In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITS_PER_LONG The code in dm-log rounds up bitset_size to 32 bits. It then uses find_next_zero_bit_le on the allocated region. find_next_zero_bit_le accesses the bitmap using unsigned long pointers. So, on 64-bit architectures, it may access 4 bytes beyond the allocated size. Fix this bug by rounding up bitset_size to BITS_PER_LONG. This bug was found by running the lvm2 testsuite with kasan.
A vulnerability exists in the Linux kernel's DM (Device Mapper) log component, specifically in how it handles region bitmap sizes. The issue arises because the code rounds up the bitset size to 32 bits and then uses a function that accesses the bitmap with unsigned long pointers. On 64-bit architectures, this can lead to reading 4 bytes beyond the allocated size. The vulnerability was identified while running the LVM2 testsuite with KASAN (Kernel Address Sanitizer).
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0d2209b54f1de0c2f99cab246d4cf2cfe24aaaa9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/85e123c27d5cbc22cfdc01de1e2ca1d9003a02d0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9a02f3275acc628c0d956be771405ced79ac36df | kernel.org | Patch |
| https://git.kernel.org/stable/c/ae460312875159285cef5bf3dc654593f404a1ef | kernel.org | Patch |
| https://git.kernel.org/stable/c/ba751f0d25f07aa21ce9b85372a3792bf7969d13 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.18, < 5.4.200 >= 5.5, < 5.10.124 >= 5.11, < 5.15.49 >= 5.16, < 5.18.6 5.19 rc1 5.19 rc2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 24, 2025 | Initial Analysis | [email protected] |
| Feb 26, 2025 | New CVE Received | kernel.org |