CVE-2022-49710: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49710 is a vulnerability discovered in the Linux kernel's device mapper mirror log component. The issue was identified when the code in dm-log rounds up bitset_size to 32 bits and then uses find_next_zero_bit_le on the allocated region. This vulnerability was discovered during testing of the lvm2 testsuite with KASAN (Kernel Address Sanitizer) (Kernel Git).

The technical issue involves the dm-log component incorrectly handling bitmap size calculations. When find_next_zero_bit_le accesses the bitmap using unsigned long pointers on 64-bit architectures, it may access 4 bytes beyond the allocated size. This occurs because the bitset_size is rounded up to 32 bits, but the actual access pattern requires BITS_PER_LONG alignment (Kernel Git).

The vulnerability could lead to out-of-bounds memory access on 64-bit architectures, potentially causing memory corruption or system instability when using the device mapper mirror log functionality (NVD).

The vulnerability was discovered during testing with the kernel address sanitizer (KASAN), suggesting it requires local access to the system to trigger. No known exploits in the wild have been reported (Kernel Git).

The issue has been fixed by modifying the code to round up bitset_size to BITS_PER_LONG instead of 32 bits. The fix was implemented through a patch that modifies the dm-log.c file (Kernel Git).