cbcvebase.
CVE-2022-49708
published 2025-02-26

CVE-2022-49708: In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: kernel BUG at…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.28%
20.6th percentile
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: kernel BUG at fs/ext4/mballoc.c:3211! [...] RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f [...] Call Trace: ext4_mb_new_blocks+0x9df/0x5d30 ext4_ext_map_blocks+0x1803/0x4d80 ext4_map_blocks+0x3a4/0x1a10 ext4_writepages+0x126d/0x2c30 do_writepages+0x7f/0x1b0 __filemap_fdatawrite_range+0x285/0x3b0 file_write_and_wait_range+0xb1/0x140 ext4_sync_file+0x1aa/0xca0 vfs_fsync_range+0xfb/0x260 do_fsync+0x48/0xa0 [...] Above issue may happen as follows: do_fsync vfs_fsync_range ext4_sync_file file_write_and_wait_range __filemap_fdatawrite_range do_writepages ext4_writepages mpage_map_and_submit_extent mpage_map_one_extent ext4_map_blocks ext4_mb_new_blocks ext4_mb_normalize_request >>> start + size ac_o_ex.fe_logical ext4_mb_regular_allocator ext4_mb_simple_scan_group ext4_mb_use_best_found ext4_mb_new_preallocation ext4_mb_new_inode_pa ext4_mb_use_inode_pa >>> set ac->ac_b_ex.fe_len >> BUG_ON(ac->ac_b_ex.fe_len ac_o_ex.fe_logical" may occur when the size is truncated. So start should be the start position of the group where ac_o_ex.fe_logical is located after alignment. In addition, when the value of fe_logical or EXT4_BLOCKS_PER_GROUP is very large, the value calculated by start_off is more accurate.

Affected

43 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 5.18.14-1 (bookworm)linux 5.18.14-1 (bookworm)
linuxlinux
linuxlinux
linuxlinux
linuxlinux
linuxlinux
linuxlinux
linuxlinux
linuxlinux
linuxlinux>= 3.10.107 < 3.113.11
linuxlinux>= 3.12.72 < 3.133.13
linuxlinux>= 3.16.44 < 3.173.17
linuxlinux>= 3.2.89 < 3.33.3
linuxlinux>= 4.1.40 < 4.24.2
linuxlinux>= 4.10.2 < 4.114.11
linuxlinux>= 4.4.53 < 4.54.5
linuxlinux>= 4.9.14 < 4.9.3204.9.320
linuxlinux>= cd648b8a8fd5071d232242d5ee7ee3c0815776af < a37c1359714da42517dd19d36fc3c4d17edba832a37c1359714da42517dd19d36fc3c4d17edba832
linuxlinux>= cd648b8a8fd5071d232242d5ee7ee3c0815776af < 5707d721d1819db57dba57b1d4623034fcb320475707d721d1819db57dba57b1d4623034fcb32047
linuxlinux>= cd648b8a8fd5071d232242d5ee7ee3c0815776af < a6b31616e5afe1d3972cb0682a373e50597faf5ca6b31616e5afe1d3972cb0682a373e50597faf5c
linuxlinux>= cd648b8a8fd5071d232242d5ee7ee3c0815776af < 6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f
linuxlinux>= cd648b8a8fd5071d232242d5ee7ee3c0815776af < 90f0f9d45dff0128c0fca0d2358c4153b024afa690f0f9d45dff0128c0fca0d2358c4153b024afa6
linuxlinux>= cd648b8a8fd5071d232242d5ee7ee3c0815776af < 887a3e9ad4b8309a2266bce7ae749b2bf1f7a687887a3e9ad4b8309a2266bce7ae749b2bf1f7a687
linuxlinux>= cd648b8a8fd5071d232242d5ee7ee3c0815776af < a08f789d2ab5242c07e716baf9a835725046be89a08f789d2ab5242c07e716baf9a835725046be89
linuxlinux>= fc6c2da174edd7a7b760b12c60d432d300e05cca < 6880fb2e64331b9fdc85d3f32b1d7e81ad8703f16880fb2e64331b9fdc85d3f32b1d7e81ad8703f1

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.