CVE-2022-49710: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49710 is a vulnerability discovered in the Linux kernel's device mapper mirror log component. The issue was identified when the code in dm-log rounds up bitsetsize to 32 bits and then uses findnextzerobit_le on the allocated region. This vulnerability was discovered during testing of the lvm2 testsuite with KASAN (Kernel Address Sanitizer) (Kernel Git).

The technical issue involves the dm-log component incorrectly handling bitmap size calculations. When findnextzerobitle accesses the bitmap using unsigned long pointers on 64-bit architectures, it may access 4 bytes beyond the allocated size. This occurs because the bitsetsize is rounded up to 32 bits, but the actual access pattern requires BITSPER_LONG alignment (Kernel Git).

The vulnerability could lead to out-of-bounds memory access on 64-bit architectures, potentially causing memory corruption or system instability when using the device mapper mirror log functionality (NVD).

The issue has been fixed by modifying the code to round up bitsetsize to BITSPER_LONG instead of 32 bits. The fix was implemented through a patch that modifies the dm-log.c file (Kernel Git).