CVE-2022-49469: btrfs: fix anon_dev leak in create_subvol()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-26 · updated 2026-06-17
Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix anon_dev leak in create_subvol() When btrfs_qgroup_inherit(), btrfs_alloc_tree_block, or btrfs_insert_root() fail in create_subvol(), we return without freeing anon_dev. Reorganize the error handling in create_subvol() to fix this.

Affected products

Linux kernel: from 5.8.3 before 5.17.14; from 5.18 before 5.18.3 — fixed in 5.17.14, 5.18.3

How to fix

Upgrade to a fixed version: Linux kernel 5.17.14, 5.18.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/2256e901f5bddc56e24089c96f27b77da932dfcc
https://git.kernel.org/stable/c/7a875ad8706f0903a0e812e0dd701956ee9826ff
https://git.kernel.org/stable/c/d887b3de318834f9aa637ecf79c6bc66cba7c69a

Get alerted when CVE-2022-49469 or the next vulnerability affects your stack