CVE-2022-49655: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49655 is a vulnerability in the Linux kernel's fscache (filesystem cache) component. The issue occurs when an NFS file is opened for writing and closed, where fscache_invalidate() is called to invalidate the file. If the cookie is in the LOOKING_UP state (or CREATING state), the invalidation request isn't properly recorded for fscache_cookie_state_machine() to process (Kernel Git).

The vulnerability stems from a race condition in the fscache invalidation/lookup process. When __fscache_invalidate() encounters a cookie in the LOOKING_UP state, it fails to set the necessary flag to indicate the need for invalidation. This requires a count on the n_accesses counter for the state machine, which releases when completed. The fscache_cookie_state_machine() needs to shift to the INVALIDATING state when it sees the flag (Kernel Git).

Without proper invalidation handling, an NFS file can become corrupted if it gets modified locally and then read locally, as the cache contents may not get properly updated. This affects the integrity of cached file data in systems using NFS with fscache (Kernel Git).

The issue has been fixed by modifying __fscache_invalidate() to set a flag when it sees the cookie is in the LOOKING_UP state, indicating the need for invalidation. The fix includes proper handling of the n_accesses counter and state machine transitions (Kernel Git).