CVE-2022-48635

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fsdax: Fix infinite loop in dax_iomap_rw()

I got an infinite loop and a WARNING report when executing a tail command in virtiofs.

WARNING: CPU: 10 PID: 964 at fs/iomap/iter.c:34 iomap_iter+0x3a2/0x3d0 Modules linked in: CPU: 10 PID: 964 Comm: tail Not tainted 5.19.0-rc7 Call Trace: <TASK> dax_iomap_rw+0xea/0x620 ? __this_cpu_preempt_check+0x13/0x20 fuse_dax_read_iter+0x47/0x80 fuse_file_read_iter+0xae/0xd0 new_sync_read+0xfe/0x180 ? 0xffffffff81000000 vfs_read+0x14d/0x1a0 ksys_read+0x6d/0xf0 __x64_sys_read+0x1a/0x20 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd

The tail command will call read() with a count of 0. In this case, iomap_iter() will report this WARNING, and always return 1 which casuing the infinite loop in dax_iomap_rw().

Fixing by checking count whether is 0 in dax_iomap_rw().

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

VendorProductVersions
LinuxLinux>= 8df4919cb921b28809d05feae3e98dc5d8b48146, < 463f36137c40342fb03bba380c1bf703c40d89a6; >= ca289e0b95afa973d204c77a4ad5c37e06145fbf, < 929ef155e1da41c06f4d8ca86ae12b851a83a744; >= ca289e0b95afa973d204c77a4ad5c37e06145fbf, < 60644dffac87b1bb47bdb393aa29d5f2ffcf41a0; >= ca289e0b95afa973d204c77a4ad5c37e06145fbf, < 17d9c15c9b9e7fb285f7ac5367dfb5f00ff575e3
LinuxLinux5.15
linuxlinux_kernel5.15
linuxlinux_kernel>= ca289e0b95af, < 17d9c15c9b9e

References

Timeline

Published
Apr 28, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-486367.8In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroupCVE-2022-486377.8In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading thCVE-2022-486385.3In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroup_get_from_id() must check the looked-up kn is a directoryCVE-2022-486395.5In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tc_new_tfilter() tfilter_putCVE-2022-48645.4Argument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.CVE-2022-486405.5In the Linux kernel, the following vulnerability has been resolved: bonding: fix NULL deref in bond_rr_gen_slave_id Fix a NULL dereferenceCVE-2022-486415.5In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fiCVE-2022-486425.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() ICVE-2022-486435.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_aCVE-2022-486445.5In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled ICVE-2022-486455.5In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSNCVE-2022-486466.2In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efx_hard_start_xmit Like in
CVE-2022-48635: Medium severity, CVSS 6.2 | Vulnix