CVE-2022-28796: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-28796 affects the Linux kernel versions before 5.17.1, specifically in the jbd2journalwaitupdates function in fs/jbd2/transaction.c. The vulnerability was discovered and disclosed on April 8, 2022. The issue involves a use-after-free vulnerability caused by a transactiont race condition (NVD, MITRE).

The vulnerability occurs in the jbd2journalwaitupdates function where a transaction might get committed and freed via jbd2journalcommittransaction() -> jbd2journalfreetransaction() when jstate_lock is released. The issue arises because the running transaction can get freed under certain conditions when the bind operation fails before attempting to grab a reference count on a device (Linux Commit). The vulnerability has been assigned a CVSS v3.1 score of 7.0 (HIGH) with a vector of CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (NetApp Advisory).

Successful exploitation of this vulnerability could lead to disclosure of sensitive information, addition or modification of data, or Denial of Service (DoS). The vulnerability allows potential attackers with local access to exploit a race condition that could result in a use-after-free scenario (NetApp Advisory).

The vulnerability has been fixed in Linux kernel version 5.17.1. The fix involves checking for journal->jrunningtransaction every time the jstatelock is released and acquired to avoid use-after-free issues. Users are advised to upgrade to Linux kernel version 5.17.1 or later (Linux Commit).