CVE-2022-49425
published 2025-02-26CVE-2022-49425: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.27%
19.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix dereference of stale list iterator after loop body
The list iterator variable will be a bogus pointer if no break was hit.
Dereferencing it (cur->page in this case) could load an out-of-bounds/undefined
value making it unsafe to use that in the comparision to determine if the
specific element was found.
Since 'cur->page' *can* be out-ouf-bounds it cannot be guaranteed that
by chance (or intention of an attacker) it matches the value of 'page'
even though the correct element was not found.
This is fixed by using a separate list iterator variable for the loop
and only setting the original variable if a suitable element was found.
Then determing if the element was found is simply checking if the
variable is set.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.5-1 (bookworm) | linux 5.18.5-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 8c242db9b8c01b252290e23827163787f07e01d1 < 385edd3ce5b4b1e9d31f474a5e35a39779ec1110 | 385edd3ce5b4b1e9d31f474a5e35a39779ec1110 |
| linux | linux | >= 8c242db9b8c01b252290e23827163787f07e01d1 < 5e47a7add3dda7f236548c5ec3017776dc2a729f | 5e47a7add3dda7f236548c5ec3017776dc2a729f |
| linux | linux | >= 8c242db9b8c01b252290e23827163787f07e01d1 < 51d584704d18e60fa473823654f35611c777b291 | 51d584704d18e60fa473823654f35611c777b291 |
| linux | linux | >= 8c242db9b8c01b252290e23827163787f07e01d1 < 45b2b7d7108ae1e25a5036cab04ab9273e792332 | 45b2b7d7108ae1e25a5036cab04ab9273e792332 |
| linux | linux | >= 8c242db9b8c01b252290e23827163787f07e01d1 < b26e1c777890e4b938136deb8ec07a29f33862e4 | b26e1c777890e4b938136deb8ec07a29f33862e4 |
| linux | linux | >= 8c242db9b8c01b252290e23827163787f07e01d1 < ed7efc472c00986dcd6903ab6ed165c7fa167674 | ed7efc472c00986dcd6903ab6ed165c7fa167674 |
| linux | linux | >= 8c242db9b8c01b252290e23827163787f07e01d1 < 2aaf51dd39afb6d01d13f1e6fe20b684733b37d5 | 2aaf51dd39afb6d01d13f1e6fe20b684733b37d5 |
| linux | linux_kernel | >= 0 < 5.10.127-1 | 5.10.127-1 |
| linux | linux_kernel | >= 0 < 5.18.5-1 | 5.18.5-1 |
| linux | linux_kernel | >= 0 < 5.18.5-1 | 5.18.5-1 |
| linux | linux_kernel | >= 0 < 5.18.5-1 | 5.18.5-1 |
| linux | linux_kernel | >= 4.12 < 4.19.247 | 4.19.247 |
| linux | linux_kernel | >= 4.20 < 5.4.198 | 5.4.198 |
| linux | linux_kernel | >= 5.11 < 5.15.46 | 5.15.46 |
| linux | linux_kernel | >= 5.16 < 5.17.14 | 5.17.14 |
| linux | linux_kernel | >= 5.18 < 5.18.3 | 5.18.3 |
| linux | linux_kernel | >= 5.5 < 5.10.121 | 5.10.121 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: f2fs: fix dereference of stale list iterator after loop body
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49425 [MEDIUM] kernel: f2fs: fix dereference of stale list iterator after loop body
kernel: f2fs: fix dereference of stale list iterator after loop body
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix dereference of stale list iterator after loop body
The list iterator variable will be a bogus pointer if no break was hit.
Dereferencing it (cur->page in this case) could load an out-of-bounds/undefined
value making it unsafe to use that in the comparision to determine if the
specific element was found.
Since 'cur->page' *can* be out-ouf-bounds it cannot be guaranteed that
by chance (or intention of an attacker) it matches the value of 'page'
even though the correct element was not found.
This is fixed by using a separate list iterator variable for the loop
and only setting the original variable if a suitable element was found.
Then determing i
Debian
CVE-2022-49425: linux - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix d...
vendor_debian·2022·CVSS 5.5
CVE-2022-49425 [MEDIUM] CVE-2022-49425: linux - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix d...
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a bogus pointer if no break was hit. Dereferencing it (cur->page in this case) could load an out-of-bounds/undefined value making it unsafe to use that in the comparision to determine if the specific element was found. Since 'cur->page' *can* be out-ouf-bounds it cannot be guaranteed that by chance (or intention of an attacker) it matches the value of 'page' even though the correct element was not found. This is fixed by using a separate list iterator variable for the loop and only setting the original variable if a suitable element was found. Then determing if the element was found is simply checking if the variable is set.
Sco
GHSA
GHSA-2j82-ggvf-vjmx: In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix dereference of stale list iterator after loop body
The list iterator v
ghsa_unreviewed·2025-10-22
CVE-2022-49425 [MEDIUM] CWE-476 GHSA-2j82-ggvf-vjmx: In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix dereference of stale list iterator after loop body
The list iterator v
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix dereference of stale list iterator after loop body
The list iterator variable will be a bogus pointer if no break was hit.
Dereferencing it (cur->page in this case) could load an out-of-bounds/undefined
value making it unsafe to use that in the comparision to determine if the
specific element was found.
Since 'cur->page' *can* be out-ouf-bounds it cannot be guaranteed that
by chance (or intention of an attacker) it matches the value of 'page'
even though the correct element was not found.
This is fixed by using a separate list iterator variable for the loop
and only setting the original variable if a suitable element was found.
Then determing if the element was found is simply checking if the
variable is set.
OSV
CVE-2022-49425: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator var
osv·2025-02-26·CVSS 5.5
CVE-2022-49425 [MEDIUM] CVE-2022-49425: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator var
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a bogus pointer if no break was hit. Dereferencing it (cur->page in this case) could load an out-of-bounds/undefined value making it unsafe to use that in the comparision to determine if the specific element was found. Since 'cur->page' *can* be out-ouf-bounds it cannot be guaranteed that by chance (or intention of an attacker) it matches the value of 'page' even though the correct element was not found. This is fixed by using a separate list iterator variable for the loop and only setting the original variable if a suitable element was found. Then determing if the element was found is simply checking if the variable is set.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/2aaf51dd39afb6d01d13f1e6fe20b684733b37d5https://git.kernel.org/stable/c/385edd3ce5b4b1e9d31f474a5e35a39779ec1110https://git.kernel.org/stable/c/45b2b7d7108ae1e25a5036cab04ab9273e792332https://git.kernel.org/stable/c/51d584704d18e60fa473823654f35611c777b291https://git.kernel.org/stable/c/5e47a7add3dda7f236548c5ec3017776dc2a729fhttps://git.kernel.org/stable/c/b26e1c777890e4b938136deb8ec07a29f33862e4https://git.kernel.org/stable/c/ed7efc472c00986dcd6903ab6ed165c7fa167674
2025-02-26
Published