CVE-2022-49567 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-49567 Interim 1 11 2025-12-23T02:35:12Z current 2025-02-27T00:30:58Z 2025-12-23T02:35:12Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-49567 In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpol_rebind_policy() mpol_set_nodemask()(mm/mempolicy.c) does not set up nodemask when pol->mode is MPOL_LOCAL. Check pol->mode before access pol->w.cpuset_mems_allowed in mpol_rebind_policy()(mm/mempolicy.c). BUG: KMSAN: uninit-value in mpol_rebind_policy mm/mempolicy.c:352 [inline] BUG: KMSAN: uninit-value in mpol_rebind_task+0x2ac/0x2c0 mm/mempolicy.c:368 mpol_rebind_policy mm/mempolicy.c:352 [inline] mpol_rebind_task+0x2ac/0x2c0 mm/mempolicy.c:368 cpuset_change_task_nodemask kernel/cgroup/cpuset.c:1711 [inline] cpuset_attach+0x787/0x15e0 kernel/cgroup/cpuset.c:2278 cgroup_migrate_execute+0x1023/0x1d20 kernel/cgroup/cgroup.c:2515 cgroup_migrate kernel/cgroup/cgroup.c:2771 [inline] cgroup_attach_task+0x540/0x8b0 kernel/cgroup/cgroup.c:2804 __cgroup1_procs_write+0x5cc/0x7a0 kernel/cgroup/cgroup-v1.c:520 cgroup1_tasks_write+0x94/0xb0 kernel/cgroup/cgroup-v1.c:539 cgroup_file_write+0x4c2/0x9e0 kernel/cgroup/cgroup.c:3852 kernfs_fop_write_iter+0x66a/0x9f0 fs/kernfs/file.c:296 call_write_iter include/linux/fs.h:2162 [inline] new_sync_write fs/read_write.c:503 [inline] vfs_write+0x1318/0x2030 fs/read_write.c:590 ksys_write+0x28b/0x510 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0xdb/0x120 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was created at: slab_post_alloc_hook mm/slab.h:524 [inline] slab_alloc_node mm/slub.c:3251 [inline] slab_alloc mm/slub.c:3259 [inline] kmem_cache_alloc+0x902/0x11c0 mm/slub.c:3264 mpol_new mm/mempolicy.c:293 [inline] do_set_mempolicy+0x421/0xb70 mm/mempolicy.c:853 kernel_set_mempolicy mm/mempolicy.c:1504 [inline] __do_sys_set_mempolicy mm/mempolicy.c:1510 [inline] __se_sys_set_mempolicy+0x44c/0xb60 mm/mempolicy.c:1507 __x64_sys_set_mempolicy+0xd8/0x110 mm/mempolicy.c:1507 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae KMSAN: uninit-value in mpol_rebind_task (2) https://syzkaller.appspot.com/bug?id=d6eb90f952c2a5de9ea718a1b873c55cb13b59dc This patch seems to fix below bug too. KMSAN: uninit-value in mpol_rebind_mm (2) https://syzkaller.appspot.com/bug?id=f2fecd0d7013f54ec4162f60743a2b28df40926b The uninit-value is pol->w.cpuset_mems_allowed in mpol_rebind_policy(). When syzkaller reproducer runs to the beginning of mpol_new(), mpol_new() mm/mempolicy.c do_mbind() mm/mempolicy.c kernel_mbind() mm/mempolicy.c `mode` is 1(MPOL_PREFERRED), nodes_empty(*nodes) is `true` and `flags` is 0. Then mode = MPOL_LOCAL; ... policy->mode = mode; policy->flags = flags; will be executed. So in mpol_set_nodemask(), mpol_set_nodemask() mm/mempolicy.c do_mbind() kernel_mbind() pol->mode is 4 (MPOL_LOCAL), that `nodemask` in `pol` is not initialized, which will be accessed in mpol_rebind_policy(). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise Live Patching 15 SP4 SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise Live Patching 15 SP6 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Real Time Module 15 SP6 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.6 bpftool-7.2.0-362.8.1.el9_3 cluster-md-kmp-default dlm-kmp-default gfs2-kmp-default kernel-5.14.0-362.8.1.el9_3 kernel-abi-stablelists-5.14.0-362.8.1.el9_3 kernel-core-5.14.0-362.8.1.el9_3 kernel-cross-headers-5.14.0-362.8.1.el9_3 kernel-debug-5.14.0-362.8.1.el9_3 kernel-debug-core-5.14.0-362.8.1.el9_3 kernel-debug-devel-5.14.0-362.8.1.el9_3 kernel-debug-devel-matched-5.14.0-362.8.1.el9_3 kernel-debug-modules-5.14.0-362.8.1.el9_3 kernel-debug-modules-core-5.14.0-362.8.1.el9_3 kernel-debug-modules-extra-5.14.0-362.8.1.el9_3 kernel-debug-uki-virt-5.14.0-362.8.1.el9_3 kernel-default kernel-default-base kernel-default-devel kernel-default-extra kernel-default-kgraft kernel-default-kgraft-devel kernel-default-livepatch kernel-default-livepatch-devel kernel-default-man kernel-default-optional kernel-default-vdso kernel-devel kernel-devel-5.14.0-362.8.1.el9_3 kernel-devel-azure kernel-devel-matched-5.14.0-362.8.1.el9_3 kernel-devel-rt kernel-doc-5.14.0-362.8.1.el9_3 kernel-headers-5.14.0-362.8.1.el9_3 kernel-macros kernel-modules-5.14.0-362.8.1.el9_3 kernel-modules-core-5.14.0-362.8.1.el9_3 kernel-modules-extra-5.14.0-362.8.1.el9_3 kernel-rt kernel-source kernel-source-azure kernel-source-rt kernel-source-vanilla kernel-tools-5.14.0-362.8.1.el9_3 kernel-tools-libs-5.14.0-362.8.1.el9_3 kernel-tools-libs-devel-5.14.0-362.8.1.el9_3 kernel-uki-virt-5.14.0-362.8.1.el9_3 kselftests-kmp-default libperf-5.14.0-362.8.1.el9_3 ocfs2-kmp-default perf-5.14.0-362.8.1.el9_3 python3-perf-5.14.0-362.8.1.el9_3 reiserfs-kmp-default rtla-5.14.0-362.8.1.el9_3 rv-5.14.0-362.8.1.el9_3 bpftool-7.2.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-abi-stablelists-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-core-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-cross-headers-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-core-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-devel-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-devel-matched-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-modules-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-modules-core-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-modules-extra-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-debug-uki-virt-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-devel-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-devel-matched-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-doc-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-headers-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-modules-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-modules-core-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-modules-extra-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-tools-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-tools-libs-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-tools-libs-devel-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-uki-virt-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 libperf-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 perf-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 python3-perf-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 rtla-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 rv-5.14.0-362.8.1.el9_3 as a component of SUSE Liberty Linux 9 kernel-default as a component of SLES-LTSS-TERADATA 15 SP2 kernel-source as a component of SLES-LTSS-TERADATA 15 SP2 kernel-default as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-source as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS dlm-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS gfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ocfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS cluster-md-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default-kgraft as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-kgraft-devel as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default as a component of SUSE Linux Enterprise Micro 5.0 kernel-default as a component of SUSE Linux Enterprise Micro 5.1 kernel-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-source as a component of SUSE Linux Enterprise Micro 5.1 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-default as a component of SUSE Linux Enterprise Micro 5.2 kernel-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-source as a component of SUSE Linux Enterprise Micro 5.2 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-default as a component of SUSE Linux Enterprise Micro 5.3 kernel-rt as a component of SUSE Linux Enterprise Micro 5.3 kernel-source as a component of SUSE Linux Enterprise Micro 5.3 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.3 kernel-default as a component of SUSE Linux Enterprise Micro 5.4 kernel-rt as a component of SUSE Linux Enterprise Micro 5.4 kernel-source as a component of SUSE Linux Enterprise Micro 5.4 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.4 kernel-default as a component of SUSE Linux Enterprise Micro 5.5 kernel-macros as a component of SUSE Linux Enterprise Micro 5.5 kernel-source as a component of SUSE Linux Enterprise Micro 5.5 kernel-devel-rt as a component of SUSE Linux Enterprise Micro 5.5 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.5 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-default as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default-base as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default-devel as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel-azure as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source-azure as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15 SP1-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-source as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 cluster-md-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 dlm-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gfs2-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 ocfs2-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default-extra as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-source as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default as a component of SUSE Linux Micro 6.0 kernel-devel as a component of SUSE Linux Micro 6.0 kernel-macros as a component of SUSE Linux Micro 6.0 kernel-source as a component of SUSE Linux Micro 6.0 kernel-devel-rt as a component of SUSE Linux Micro 6.0 kernel-source-rt as a component of SUSE Linux Micro 6.0 kernel-default as a component of SUSE Linux Micro 6.1 kernel-devel as a component of SUSE Linux Micro 6.1 kernel-macros as a component of SUSE Linux Micro 6.1 kernel-source as a component of SUSE Linux Micro 6.1 kernel-devel-rt as a component of SUSE Linux Micro 6.1 kernel-source-rt as a component of SUSE Linux Micro 6.1 kernel-default as a component of SUSE Manager Proxy 4.3 kernel-default-devel as a component of SUSE Manager Proxy 4.3 kernel-devel as a component of SUSE Manager Proxy 4.3 kernel-macros as a component of SUSE Manager Proxy 4.3 kernel-source as a component of SUSE Manager Proxy 4.3 kernel-default as a component of SUSE Manager Retail Branch Server 4.3 kernel-default-devel as a component of SUSE Manager Retail Branch Server 4.3 kernel-devel as a component of SUSE Manager Retail Branch Server 4.3 kernel-macros as a component of SUSE Manager Retail Branch Server 4.3 kernel-source as a component of SUSE Manager Retail Branch Server 4.3 kernel-default as a component of SUSE Manager Server 4.3 kernel-default-devel as a component of SUSE Manager Server 4.3 kernel-devel as a component of SUSE Manager Server 4.3 kernel-macros as a component of SUSE Manager Server 4.3 kernel-source as a component of SUSE Manager Server 4.3 kernel-devel-rt as a component of SUSE Real Time Module 15 SP6 kernel-source-rt as a component of SUSE Real Time Module 15 SP6 cluster-md-kmp-default as a component of openSUSE Leap 15.6 dlm-kmp-default as a component of openSUSE Leap 15.6 gfs2-kmp-default as a component of openSUSE Leap 15.6 kernel-default as a component of openSUSE Leap 15.6 kernel-default-devel as a component of openSUSE Leap 15.6 kernel-default-extra as a component of openSUSE Leap 15.6 kernel-default-livepatch as a component of openSUSE Leap 15.6 kernel-default-livepatch-devel as a component of openSUSE Leap 15.6 kernel-default-optional as a component of openSUSE Leap 15.6 kernel-default-vdso as a component of openSUSE Leap 15.6 kselftests-kmp-default as a component of openSUSE Leap 15.6 ocfs2-kmp-default as a component of openSUSE Leap 15.6 reiserfs-kmp-default as a component of openSUSE Leap 15.6 kernel-devel as a component of openSUSE Leap 15.6 kernel-macros as a component of openSUSE Leap 15.6 kernel-source as a component of openSUSE Leap 15.6 kernel-source-vanilla as a component of openSUSE Leap 15.6 kernel-devel-azure as a component of openSUSE Leap 15.6 kernel-source-azure as a component of openSUSE Leap 15.6 kernel-devel-rt as a component of openSUSE Leap 15.6 kernel-source-rt as a component of openSUSE Leap 15.6 In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix uninit-value in mpol_rebind_policy() mpol_set_nodemask()(mm/mempolicy.c) does not set up nodemask when pol->mode is MPOL_LOCAL. Check pol->mode before access pol->w.cpuset_mems_allowed in mpol_rebind_policy()(mm/mempolicy.c). BUG: KMSAN: uninit-value in mpol_rebind_policy mm/mempolicy.c:352 [inline] BUG: KMSAN: uninit-value in mpol_rebind_task+0x2ac/0x2c0 mm/mempolicy.c:368 mpol_rebind_policy mm/mempolicy.c:352 [inline] mpol_rebind_task+0x2ac/0x2c0 mm/mempolicy.c:368 cpuset_change_task_nodemask kernel/cgroup/cpuset.c:1711 [inline] cpuset_attach+0x787/0x15e0 kernel/cgroup/cpuset.c:2278 cgroup_migrate_execute+0x1023/0x1d20 kernel/cgroup/cgroup.c:2515 cgroup_migrate kernel/cgroup/cgroup.c:2771 [inline] cgroup_attach_task+0x540/0x8b0 kernel/cgroup/cgroup.c:2804 __cgroup1_procs_write+0x5cc/0x7a0 kernel/cgroup/cgroup-v1.c:520 cgroup1_tasks_write+0x94/0xb0 kernel/cgroup/cgroup-v1.c:539 cgroup_file_write+0x4c2/0x9e0 kernel/cgroup/cgroup.c:3852 kernfs_fop_write_iter+0x66a/0x9f0 fs/kernfs/file.c:296 call_write_iter include/linux/fs.h:2162 [inline] new_sync_write fs/read_write.c:503 [inline] vfs_write+0x1318/0x2030 fs/read_write.c:590 ksys_write+0x28b/0x510 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0xdb/0x120 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was created at: slab_post_alloc_hook mm/slab.h:524 [inline] slab_alloc_node mm/slub.c:3251 [inline] slab_alloc mm/slub.c:3259 [inline] kmem_cache_alloc+0x902/0x11c0 mm/slub.c:3264 mpol_new mm/mempolicy.c:293 [inline] do_set_mempolicy+0x421/0xb70 mm/mempolicy.c:853 kernel_set_mempolicy mm/mempolicy.c:1504 [inline] __do_sys_set_mempolicy mm/mempolicy.c:1510 [inline] __se_sys_set_mempolicy+0x44c/0xb60 mm/mempolicy.c:1507 __x64_sys_set_mempolicy+0xd8/0x110 mm/mempolicy.c:1507 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae KMSAN: uninit-value in mpol_rebind_task (2) https://syzkaller.appspot.com/bug?id=d6eb90f952c2a5de9ea718a1b873c55cb13b59dc This patch seems to fix below bug too. KMSAN: uninit-value in mpol_rebind_mm (2) https://syzkaller.appspot.com/bug?id=f2fecd0d7013f54ec4162f60743a2b28df40926b The uninit-value is pol->w.cpuset_mems_allowed in mpol_rebind_policy(). When syzkaller reproducer runs to the beginning of mpol_new(), mpol_new() mm/mempolicy.c do_mbind() mm/mempolicy.c kernel_mbind() mm/mempolicy.c `mode` is 1(MPOL_PREFERRED), nodes_empty(*nodes) is `true` and `flags` is 0. Then mode = MPOL_LOCAL; ... policy->mode = mode; policy->flags = flags; will be executed. So in mpol_set_nodemask(), mpol_set_nodemask() mm/mempolicy.c do_mbind() kernel_mbind() pol->mode is 4 (MPOL_LOCAL), that `nodemask` in `pol` is not initialized, which will be accessed in mpol_rebind_policy(). CVE-2022-49567 SUSE Liberty Linux 9:bpftool-7.2.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-core-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-core-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-devel-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-doc-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-headers-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-modules-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-modules-core-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-tools-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:libperf-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:perf-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:python3-perf-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:rtla-5.14.0-362.8.1.el9_3 SUSE Liberty Linux 9:rv-5.14.0-362.8.1.el9_3 SUSE Linux Enterprise Live Patching 15 SP6:kernel-default SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP6:kernel-source SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP6:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP6:kernel-source SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-default SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-default-extra SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-source SUSE Linux Micro 6.0:kernel-default SUSE Linux Micro 6.0:kernel-devel SUSE Linux Micro 6.0:kernel-devel-rt SUSE Linux Micro 6.0:kernel-macros SUSE Linux Micro 6.0:kernel-source SUSE Linux Micro 6.0:kernel-source-rt SUSE Linux Micro 6.1:kernel-default SUSE Linux Micro 6.1:kernel-devel SUSE Linux Micro 6.1:kernel-devel-rt SUSE Linux Micro 6.1:kernel-macros SUSE Linux Micro 6.1:kernel-source SUSE Linux Micro 6.1:kernel-source-rt SUSE Real Time Module 15 SP6:kernel-devel-rt SUSE Real Time Module 15 SP6:kernel-source-rt openSUSE Leap 15.6:cluster-md-kmp-default openSUSE Leap 15.6:dlm-kmp-default openSUSE Leap 15.6:gfs2-kmp-default openSUSE Leap 15.6:kernel-default openSUSE Leap 15.6:kernel-default-devel openSUSE Leap 15.6:kernel-default-extra openSUSE Leap 15.6:kernel-default-livepatch openSUSE Leap 15.6:kernel-default-livepatch-devel openSUSE Leap 15.6:kernel-default-optional openSUSE Leap 15.6:kernel-default-vdso openSUSE Leap 15.6:kernel-devel openSUSE Leap 15.6:kernel-devel-azure openSUSE Leap 15.6:kernel-devel-rt openSUSE Leap 15.6:kernel-macros openSUSE Leap 15.6:kernel-source openSUSE Leap 15.6:kernel-source-azure openSUSE Leap 15.6:kernel-source-rt openSUSE Leap 15.6:kernel-source-vanilla openSUSE Leap 15.6:kselftests-kmp-default openSUSE Leap 15.6:ocfs2-kmp-default openSUSE Leap 15.6:reiserfs-kmp-default moderate 0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N