CVE-2022-49898: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49898 is a vulnerability in the Linux kernel that affects the btrfs filesystem's tree modification log handling of reallocated nodes. The vulnerability was discovered when a kernel panic occurred at fs/btrfs/tree-mod-log.c:677 due to invalid opcode handling (NVD, Debian Tracker).

The vulnerability occurs in the tree_mod_log_rewind() function when processing BTRFS_MOD_LOG_KEY_REMOVE_WHILE_FREEING operations. The issue arises because nodes are replayed in chronological order, and during a REPLACE operation, REMOVE_WHILE_FREEING is logged for every slot starting at 0. The bug is triggered when the number of REMOVE_WHILE_FREEING operations exceeds the number of items in the block (NVD).

When exploited, this vulnerability results in a kernel panic, causing system instability and potential denial of service. The issue specifically affects systems using the btrfs filesystem and can be triggered during certain filesystem operations (Wiz).

The vulnerability has been fixed in the Linux kernel. Various Linux distributions have released patches to address this issue. For Debian, fixed versions are available in bookworm (6.1.129-1), bookworm security (6.1.135-1), trixie (6.12.22-1), and sid (6.12.25-1) (Debian Tracker).