CVE-2022-49220

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dax: make sure inodes are flushed before destroy cache

A bug can be triggered by following command

$ modprobe nd_pmem && modprobe -r nd_pmem

[ 10.060014] BUG dax_cache (Not tainted): Objects remaining in dax_cache on __kmem_cache_shutdown() [ 10.060938] Slab 0x0000000085b729ac objects=9 used=1 fp=0x000000004f5ae469 flags=0x200000000010200(slab|head|node) [ 10.062433] Call Trace: [ 10.062673] dump_stack_lvl+0x34/0x44 [ 10.062865] slab_err+0x90/0xd0 [ 10.063619] __kmem_cache_shutdown+0x13b/0x2f0 [ 10.063848] kmem_cache_destroy+0x4a/0x110 [ 10.064058] __x64_sys_delete_module+0x265/0x300

This is caused by dax_fs_exit() not flushing inodes before destroy cache. To fix this issue, call rcu_barrier() before destroy cache.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 7b6be8444e0f0dd675b54d059793423d3c9b4c03, < 770d42fff12d8595adda9025a0b92091f543e775; >= 7b6be8444e0f0dd675b54d059793423d3c9b4c03, < ec376f5c11c88c0215d173599db8449cd4196759; >= 7b6be8444e0f0dd675b54d059793423d3c9b4c03, < e2951eaa9398415ac054b7bd80b8163b6838ead4; >= 7b6be8444e0f0dd675b54d059793423d3c9b4c03, < f2a1e0eb70c2d954176c07d75d28742bde30e9f3; >= 7b6be8444e0f0dd675b54d059793423d3c9b4c03, < b786abe7c67c6ef71410c8e23292b3091d616ad1; >= 7b6be8444e0f0dd675b54d059793423d3c9b4c03, < a7e8de822e0b1979f08767c751f6c8a9c1d4ad86
LinuxLinux4.12

References

Timeline

Published
Feb 26, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-492215.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: populate connector of struct dp_panel DP CTS test case 4.2CVE-2022-492225.5In the Linux kernel, the following vulnerability has been resolved: drm/bridge: anx7625: Fix overflow issue on reading EDID The length of CVE-2022-492237.8In the Linux kernel, the following vulnerability has been resolved: cxl/port: Hold port reference until decoder release KASAN + DEBUG_KOBJCVE-2022-492245.5In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init kobjectCVE-2022-492255.5In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921s: fix a possible memory leak in mt7921_load_patch Always CVE-2022-492265.5In the Linux kernel, the following vulnerability has been resolved: net: asix: add proper error handling of usb read errors Syzbot once agCVE-2022-492275.5In the Linux kernel, the following vulnerability has been resolved: igc: avoid kernel warning when changing RX ring parameters Calling ethCVE-2022-492285.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a btf decl_tag bug when tagging a function syzbot reported a CVE-2022-492295.5In the Linux kernel, the following vulnerability has been resolved: ptp: unregister virtual clocks when unregistering physical clock. WhenCVE-2022-49233.1Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perfoCVE-2022-492305.5In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta Free alloCVE-2022-492315.5In the Linux kernel, the following vulnerability has been resolved: rtw88: fix memory overrun and memory leak during hw_scan Previously we
CVE-2022-49220: Medium severity, CVSS 5.5 | Vulnix