CVE-2022-50013

published 2025-06-18

CVE-2022-50013: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() As Dipanjan Das reported…

Priority P4 19 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()

As Dipanjan Das reported, syzkaller
found a f2fs bug as below:

RIP: 0010:f2fs_new_node_page+0x19ac/0x1fc0 fs/f2fs/node.c:1295
Call Trace:
write_all_xattrs fs/f2fs/xattr.c:487 [inline]
__f2fs_setxattr+0xe76/0x2e10 fs/f2fs/xattr.c:743
f2fs_setxattr+0x233/0xab0 fs/f2fs/xattr.c:790
f2fs_xattr_generic_set+0x133/0x170 fs/f2fs/xattr.c:86
__vfs_setxattr+0x115/0x180 fs/xattr.c:182
__vfs_setxattr_noperm+0x125/0x5f0 fs/xattr.c:216
__vfs_setxattr_locked+0x1cf/0x260 fs/xattr.c:277
vfs_setxattr+0x13f/0x330 fs/xattr.c:303
setxattr+0x146/0x160 fs/xattr.c:611
path_setxattr+0x1a7/0x1d0 fs/xattr.c:630
__do_sys_lsetxattr fs/xattr.c:653 [inline]
__se_sys_lsetxattr fs/xattr.c:649 [inline]
__x64_sys_lsetxattr+0xbd/0x150 fs/xattr.c:649
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x46/0xb0

NAT entry and nat bitmap can be inconsistent, e.g. one nid is free
in nat bitmap, and blkaddr in its NAT entry is not NULL_ADDR, it
may trigger BUG_ON() in f2fs_new_node_page(), fix it.

Affected

17 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.0.2-1 (bookworm)	linux 6.0.2-1 (bookworm)
linux	linux	—	—
linux	linux	>= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < fbfad62b29e9f8f1c1026a806c9e064ec2a7c342	fbfad62b29e9f8f1c1026a806c9e064ec2a7c342
linux	linux	>= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 29e734ec33ae4bd7de4018fb0fb0eec808c36b92	29e734ec33ae4bd7de4018fb0fb0eec808c36b92
linux	linux	>= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 800ba8979111184d5194f4233cc83afe683efc54	800ba8979111184d5194f4233cc83afe683efc54
linux	linux	>= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 5a01e45b925a0bc9718eccd33e5920f1a4e44caf	5a01e45b925a0bc9718eccd33e5920f1a4e44caf
linux	linux	>= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 43ce0a0bda2c54dad91d5a1943554eed9e050f55	43ce0a0bda2c54dad91d5a1943554eed9e050f55
linux	linux	>= 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 < 141170b759e03958f296033bb7001be62d1d363b	141170b759e03958f296033bb7001be62d1d363b
linux	linux_kernel	>= 0 < 5.10.140-1	5.10.140-1
linux	linux_kernel	>= 0 < 6.0.2-1	6.0.2-1
linux	linux_kernel	>= 0 < 6.0.2-1	6.0.2-1
linux	linux_kernel	>= 0 < 6.0.2-1	6.0.2-1
linux	linux_kernel	>= 3.8 < 4.19.256	4.19.256
linux	linux_kernel	>= 4.20 < 5.4.211	5.4.211
linux	linux_kernel	>= 5.11 < 5.15.63	5.15.63
linux	linux_kernel	>= 5.16 < 5.19.4	5.19.4
linux	linux_kernel	>= 5.5 < 5.10.138	5.10.138

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 MEDIUM

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.