CVE-2022-50205

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50205

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes stored in the superblock matches the number computed from number of inodes per group. Also verify we have at least one block worth of inodes per group. This prevents crashes on corrupted filesystems.

References
Link Resource
https://git.kernel.org/stable/c/07303a9abe3a997d9864fb4315e34b5acfe8fc25 Patch
https://git.kernel.org/stable/c/0bcdc31094a12b4baf59e241feabc9787cf635fa Patch
https://git.kernel.org/stable/c/5e63c5fe9123fa76ffaeff26c211308736ec3a07 Patch
https://git.kernel.org/stable/c/7a48fdc88a3c35e046a6a0a38eba00f21c65b16e Patch
https://git.kernel.org/stable/c/96b18d3a1be0354ccce43f0ef61b5a3d7e432552 Patch
https://git.kernel.org/stable/c/b3f423683818cfe15de14d5d9dff44148ff16bbf Patch
https://git.kernel.org/stable/c/d08bb199a406424a8ed0009efdf41710e6d849ee Patch
https://git.kernel.org/stable/c/fa78f336937240d1bc598db817d638086060e7e9 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

19 Nov 2025, 12:46

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/07303a9abe3a997d9864fb4315e34b5acfe8fc25 - () https://git.kernel.org/stable/c/07303a9abe3a997d9864fb4315e34b5acfe8fc25 - Patch
References () https://git.kernel.org/stable/c/0bcdc31094a12b4baf59e241feabc9787cf635fa - () https://git.kernel.org/stable/c/0bcdc31094a12b4baf59e241feabc9787cf635fa - Patch
References () https://git.kernel.org/stable/c/5e63c5fe9123fa76ffaeff26c211308736ec3a07 - () https://git.kernel.org/stable/c/5e63c5fe9123fa76ffaeff26c211308736ec3a07 - Patch
References () https://git.kernel.org/stable/c/7a48fdc88a3c35e046a6a0a38eba00f21c65b16e - () https://git.kernel.org/stable/c/7a48fdc88a3c35e046a6a0a38eba00f21c65b16e - Patch
References () https://git.kernel.org/stable/c/96b18d3a1be0354ccce43f0ef61b5a3d7e432552 - () https://git.kernel.org/stable/c/96b18d3a1be0354ccce43f0ef61b5a3d7e432552 - Patch
References () https://git.kernel.org/stable/c/b3f423683818cfe15de14d5d9dff44148ff16bbf - () https://git.kernel.org/stable/c/b3f423683818cfe15de14d5d9dff44148ff16bbf - Patch
References () https://git.kernel.org/stable/c/d08bb199a406424a8ed0009efdf41710e6d849ee - () https://git.kernel.org/stable/c/d08bb199a406424a8ed0009efdf41710e6d849ee - Patch
References () https://git.kernel.org/stable/c/fa78f336937240d1bc598db817d638086060e7e9 - () https://git.kernel.org/stable/c/fa78f336937240d1bc598db817d638086060e7e9 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext2: Se han añadido más comprobaciones de validez para el recuento de inodos. Se han añadido comprobaciones que verifican que el número de inodos almacenados en el superbloque coincida con el calculado a partir del número de inodos por grupo. También se ha verificado que tengamos al menos un bloque de inodos por grupo. Esto evita fallos en sistemas de archivos dañados.

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-19 12:46

NVD link : CVE-2022-50205

Mitre link : CVE-2022-50205

CVE.ORG link : CVE-2022-50205

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo