CVE-2022-49049: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49049 affects the Linux kernel's memfd_secret functionality. The vulnerability was discovered when attempting to grow an existing memfd_secret with ftruncate, which results in a kernel panic. This issue affects the memory management subsystem (mm/secretmem) in the Linux kernel (Kernel Git).

The vulnerability occurs when growing a memfd_secret file using ftruncate. When attempting to resize, the system calls into simple_setattr and truncate_inode_pages_range, eventually trying to zero memory. The normal truncation code uses the direct map (via page_address()), but memfd_secret specifically avoids direct mapping (using set_direct_map_invalid_noflush() on every fault). This mismatch causes the page_address() to return an invalid address, resulting in a kernel panic when attempting to use memset() (Kernel Git).

When exploited, this vulnerability causes a kernel panic, effectively creating a denial of service condition. The issue occurs specifically when attempting to resize an existing memfd_secret file, disrupting system operations (Kernel Git).

The vulnerability can be triggered through a specific sequence of operations: creating a memfd_secret, setting an initial size with ftruncate, mapping it, writing data, unmapping it, and then attempting to grow it with another ftruncate call (Kernel Git).

The issue has been patched by implementing a custom setattr for memfd_secret that detects resize attempts on existing files and rejects them with EINVAL. The fix prevents the panic while maintaining security. A more comprehensive solution to support growing memfd_secret files may be developed in the future (Kernel Git).