CVE-2022-49710: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITS_PER_LONG The code in dm-log rounds up bitset_size to 32 bits. It then uses find_next_zero_bit_le on the allocated region. find_next_zero_bit_le accesses the bitmap using unsigned long pointers. So, on 64-bit architectures, it may access 4 bytes beyond the allocated size. Fix this bug by rounding up bitset_size to BITS_PER_LONG. This bug was found by running the lvm2 testsuite with kasan.

Affected products

• Linux Linux Kernel: from 2.6.18, before 5.4.200 (fixed in 5.4.200); from 5.5, before 5.10.124 (fixed in 5.10.124); from 5.11, before 5.15.49 (fixed in 5.15.49); from 5.16, before 5.18.6 (fixed in 5.18.6); version 5.19 only

Published 2025-02-26. Last modified 2026-06-17.