CVE-2022-49147

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the blk alloc ext minor() function in the Linux kernel, where the ida alloc range() function returns values from min to max, inclusive. This can cause an overflow when NR EXT DEVT is used as disk->first minor in the device add disk() function, specifically in the line ddev->devt = MKDEV(disk->major, disk->first minor). The NR EXT DEVT value is equivalent to (1 << MINORBITS), which can lead to an overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.