CVE-2022-49044

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory corruption issue exists in the dm integrity ctr() function within the drivers/md/dm-integrity.c module of the Linux kernel. The flaw occurs when the tag size parameter is configured to be smaller than the actual digest size, causing the system to ignore a portion of the digest. This leads to an out-of-bounds write beyond the end of the ic->recalc tags array during the execution of integrity recalc -> integrity sector checksum -> crypto shash final. Such an operation can compromise the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.