Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-49849

btrfs: fix match incorrectly in dev_args_match_device

Medium5.5EPSS 0.20%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix match incorrectly in dev_args_match_device syzkaller found a failed assertion: assertion failed: (args->devid != (u64)-1) || args->missing, in fs/btrfs/volumes.c:6921 This can be triggered when we set devid to (u64)-1 by ioctl. In this case, the match of devid will be skipped and the match of device may succeed incorrectly. Patch 562d7b1512f7 introduced this function which is used to match device. This function contains two matching scenarios, we can distinguish them by checking the value of args->missing rather than check whether args->devid and args->uuid is default value.

Timeline

  1. ID reserved

    By Linux

  2. Published

  3. · 13 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2022-49849, by who scored it
Scored byCVSSScoreVector
NVDNVD · Analyzed3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.20% · top 90% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Affected products

  • Linux · Linux

    • affected 5578b681fbf2b22d61189a2539efd3009518b328 – < c9fe4719c662e0af17eea723cf345e37719fd3c9
    • affected 562d7b1512f7369a19bca2883e2e8672d78f0481 – < bc6c127c377010f136360552ebf91c2723081c1b
    • affected 562d7b1512f7369a19bca2883e2e8672d78f0481 – < 0fca385d6ebc3cabb20f67bcf8a71f1448bdc001
    • affected 5.15.54 – < 5.15.79

  • Linux · Linux

    • affected 5.16
    • unaffected < 5.16
    • unaffected 5.15.79 – ≤ 5.15.*
    • unaffected 6.0.9 – ≤ 6.0.*
    • unaffected 6.1 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-49849 badge
[![CVE-2022-49849](https://trackcve.app/badge/CVE-2022-49849.svg)](https://trackcve.app/cve/CVE-2022-49849)

Record last updated .