CVE-2022-49742

In the Linux kernel, the following vulnerability has been resolved:

f2fs: initialize locks earlier in f2fs_fill_super()

syzbot is reporting lockdep warning at f2fs_handle_error() [1], for spin_lock(&sbi->error_lock) is called before spin_lock_init() is called. For safe locking in error handling, move initialization of locks (and obvious structures) in f2fs_fill_super() to immediately after memory allocation.

This flaw has been rated as having a Moderate severity because exploitation requires local privileges and the ability to mount a crafted filesystem image, restricting the blast radius to a localized denial of service. Red Hat Enterprise Linux is not affected as the Flash-Friendly File System (F2FS) is neither enabled nor supported in default enterprise kernel configurations, and the vulnerable code is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.