List Corruption Vulnerability in Linux Kernel Affecting fbdev Component

CVE-2022-49511

Summary

A vulnerability in the Linux kernel's fbdev component allows for list corruption due to race conditions during deferred I/O operations. When one process adds a page to the pagelist's tail while another re-initializes the same page's list without appropriate locking mechanisms, data corruption can occur. This issue originates from improper initialization of page lists, which has been remedied by ensuring all page lists are initialized during the setup phase. The fix not only resolves the corruption issue but also streamlines the initialization process, preventing redundant actions.

References