Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential out of bound read in ext4_fc_replay_scan() For scan loop must ensure that at least EXT4_FC_TAG_BASE_LEN space. If remain space less than EXT4_FC_TAG_BASE_LEN which will lead to out of bound read when mounting corrupt file system image. ADD_RANGE/HEAD/TAIL is needed to add extra check when do journal scan, as this three tags will read data during scan, tag length couldn't less than data length which will read.

INFO

Published Date :

2025-09-15T14:46:01.672Z

Last Modified :

2025-12-23T13:28:07.958Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2022-50306 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2022-50306.

URL Resource
https://git.kernel.org/stable/c/1b45cc5c7b920fd8bf72e5a888ec7abeadf41e09 cve-icon cve-icon
https://git.kernel.org/stable/c/6969367c1500c15eddc38fda12f6d15518ad6d03 cve-icon cve-icon
https://git.kernel.org/stable/c/f234294812c9b68d603650d28743eafb718e7ad5 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091559-CVE-2022-50306-c1da@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50306 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50306 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact