CVE-2022-49708
published 2025-02-26CVE-2022-49708: In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: kernel BUG at…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix bug_on ext4_mb_use_inode_pa
Hulk Robot reported a BUG_ON:
kernel BUG at fs/ext4/mballoc.c:3211!
[...]
RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f
[...]
Call Trace:
ext4_mb_new_blocks+0x9df/0x5d30
ext4_ext_map_blocks+0x1803/0x4d80
ext4_map_blocks+0x3a4/0x1a10
ext4_writepages+0x126d/0x2c30
do_writepages+0x7f/0x1b0
__filemap_fdatawrite_range+0x285/0x3b0
file_write_and_wait_range+0xb1/0x140
ext4_sync_file+0x1aa/0xca0
vfs_fsync_range+0xfb/0x260
do_fsync+0x48/0xa0
[...]
Above issue may happen as follows:
do_fsync
vfs_fsync_range
ext4_sync_file
file_write_and_wait_range
__filemap_fdatawrite_range
do_writepages
ext4_writepages
mpage_map_and_submit_extent
mpage_map_one_extent
ext4_map_blocks
ext4_mb_new_blocks
ext4_mb_normalize_request
>>> start + size ac_o_ex.fe_logical
ext4_mb_regular_allocator
ext4_mb_simple_scan_group
ext4_mb_use_best_found
ext4_mb_new_preallocation
ext4_mb_new_inode_pa
ext4_mb_use_inode_pa
>>> set ac->ac_b_ex.fe_len >> BUG_ON(ac->ac_b_ex.fe_len ac_o_ex.fe_logical" may occur
when the size is truncated. So start should be the start position of
the group where ac_o_ex.fe_logical is located after alignment.
In addition, when the value of fe_logical or EXT4_BLOCKS_PER_GROUP
is very large, the value calculated by start_off is more accurate.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.18.14-1 (bookworm) | linux 5.18.14-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 3.10.107 < 3.11 | 3.11 |
| linux | linux | >= 3.12.72 < 3.13 | 3.13 |
| linux | linux | >= 3.16.44 < 3.17 | 3.17 |
| linux | linux | >= 3.2.89 < 3.3 | 3.3 |
| linux | linux | >= 4.1.40 < 4.2 | 4.2 |
| linux | linux | >= 4.10.2 < 4.11 | 4.11 |
| linux | linux | >= 4.4.53 < 4.5 | 4.5 |
| linux | linux | >= 4.9.14 < 4.9.320 | 4.9.320 |
| linux | linux | >= cd648b8a8fd5071d232242d5ee7ee3c0815776af < a37c1359714da42517dd19d36fc3c4d17edba832 | a37c1359714da42517dd19d36fc3c4d17edba832 |
| linux | linux | >= cd648b8a8fd5071d232242d5ee7ee3c0815776af < 5707d721d1819db57dba57b1d4623034fcb32047 | 5707d721d1819db57dba57b1d4623034fcb32047 |
| linux | linux | >= cd648b8a8fd5071d232242d5ee7ee3c0815776af < a6b31616e5afe1d3972cb0682a373e50597faf5c | a6b31616e5afe1d3972cb0682a373e50597faf5c |
| linux | linux | >= cd648b8a8fd5071d232242d5ee7ee3c0815776af < 6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f | 6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f |
| linux | linux | >= cd648b8a8fd5071d232242d5ee7ee3c0815776af < 90f0f9d45dff0128c0fca0d2358c4153b024afa6 | 90f0f9d45dff0128c0fca0d2358c4153b024afa6 |
| linux | linux | >= cd648b8a8fd5071d232242d5ee7ee3c0815776af < 887a3e9ad4b8309a2266bce7ae749b2bf1f7a687 | 887a3e9ad4b8309a2266bce7ae749b2bf1f7a687 |
| linux | linux | >= cd648b8a8fd5071d232242d5ee7ee3c0815776af < a08f789d2ab5242c07e716baf9a835725046be89 | a08f789d2ab5242c07e716baf9a835725046be89 |
| linux | linux | >= fc6c2da174edd7a7b760b12c60d432d300e05cca < 6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1 | 6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ext4: fix bug_on ext4_mb_use_inode_pa
vendor_redhat·2025-02-26·CVSS 5.5
CVE-2022-49708 [MEDIUM] kernel: ext4: fix bug_on ext4_mb_use_inode_pa
kernel: ext4: fix bug_on ext4_mb_use_inode_pa
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix bug_on ext4_mb_use_inode_pa
Hulk Robot reported a BUG_ON:
kernel BUG at fs/ext4/mballoc.c:3211!
[...]
RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f
[...]
Call Trace:
ext4_mb_new_blocks+0x9df/0x5d30
ext4_ext_map_blocks+0x1803/0x4d80
ext4_map_blocks+0x3a4/0x1a10
ext4_writepages+0x126d/0x2c30
do_writepages+0x7f/0x1b0
__filemap_fdatawrite_range+0x285/0x3b0
file_write_and_wait_range+0xb1/0x140
ext4_sync_file+0x1aa/0xca0
vfs_fsync_range+0xfb/0x260
do_fsync+0x48/0xa0
[...]
Above issue may happen as follows:
do_fsync
vfs_fsync_range
ext4_sync_file
file_write_and_wait_range
__filemap_fdatawrite_range
do_writepages
ext4_writepages
mpage_map_and_submit_extent
mpage_map
Debian
CVE-2022-49708: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: fix b...
vendor_debian·2022·CVSS 5.5
CVE-2022-49708 [MEDIUM] CVE-2022-49708: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: fix b...
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: ================================================================== kernel BUG at fs/ext4/mballoc.c:3211! [...] RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f [...] Call Trace: ext4_mb_new_blocks+0x9df/0x5d30 ext4_ext_map_blocks+0x1803/0x4d80 ext4_map_blocks+0x3a4/0x1a10 ext4_writepages+0x126d/0x2c30 do_writepages+0x7f/0x1b0 __filemap_fdatawrite_range+0x285/0x3b0 file_write_and_wait_range+0xb1/0x140 ext4_sync_file+0x1aa/0xca0 vfs_fsync_range+0xfb/0x260 do_fsync+0x48/0xa0 [...] ================================================================== Above issue may happen as follows: ------------------------------------- do_fsync vfs_fsync_range ext4_sync_
GHSA
GHSA-67hq-69g7-2v5w: In the Linux kernel, the following vulnerability has been resolved:
ext4: fix bug_on ext4_mb_use_inode_pa
Hulk Robot reported a BUG_ON:
kernel BUG a
ghsa_unreviewed·2025-10-24
CVE-2022-49708 [MEDIUM] CWE-617 GHSA-67hq-69g7-2v5w: In the Linux kernel, the following vulnerability has been resolved:
ext4: fix bug_on ext4_mb_use_inode_pa
Hulk Robot reported a BUG_ON:
kernel BUG a
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix bug_on ext4_mb_use_inode_pa
Hulk Robot reported a BUG_ON:
kernel BUG at fs/ext4/mballoc.c:3211!
[...]
RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f
[...]
Call Trace:
ext4_mb_new_blocks+0x9df/0x5d30
ext4_ext_map_blocks+0x1803/0x4d80
ext4_map_blocks+0x3a4/0x1a10
ext4_writepages+0x126d/0x2c30
do_writepages+0x7f/0x1b0
__filemap_fdatawrite_range+0x285/0x3b0
file_write_and_wait_range+0xb1/0x140
ext4_sync_file+0x1aa/0xca0
vfs_fsync_range+0xfb/0x260
do_fsync+0x48/0xa0
[...]
Above issue may happen as follows:
do_fsync
vfs_fsync_range
ext4_sync_file
file_write_and_wait_range
__filemap_fdatawrite_range
do_writepages
ext4_writepages
mpage_map_and_submit_extent
mpage_map_one_extent
ext4_map_blocks
ext4_mb_new_bloc
OSV
CVE-2022-49708: In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: ==============
osv·2025-02-26·CVSS 5.5
CVE-2022-49708 [MEDIUM] CVE-2022-49708: In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: ==============
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: ================================================================== kernel BUG at fs/ext4/mballoc.c:3211! [...] RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f [...] Call Trace: ext4_mb_new_blocks+0x9df/0x5d30 ext4_ext_map_blocks+0x1803/0x4d80 ext4_map_blocks+0x3a4/0x1a10 ext4_writepages+0x126d/0x2c30 do_writepages+0x7f/0x1b0 __filemap_fdatawrite_range+0x285/0x3b0 file_write_and_wait_range+0xb1/0x140 ext4_sync_file+0x1aa/0xca0 vfs_fsync_range+0xfb/0x260 do_fsync+0x48/0xa0 [...] ================================================================== Above issue may happen as follows: ------------------------------------- do_fsync vfs_fsync_range ext4_sync_
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/5707d721d1819db57dba57b1d4623034fcb32047https://git.kernel.org/stable/c/6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1https://git.kernel.org/stable/c/6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881fhttps://git.kernel.org/stable/c/887a3e9ad4b8309a2266bce7ae749b2bf1f7a687https://git.kernel.org/stable/c/90f0f9d45dff0128c0fca0d2358c4153b024afa6https://git.kernel.org/stable/c/a08f789d2ab5242c07e716baf9a835725046be89https://git.kernel.org/stable/c/a37c1359714da42517dd19d36fc3c4d17edba832https://git.kernel.org/stable/c/a6b31616e5afe1d3972cb0682a373e50597faf5c
2025-02-26
Published