CVE-2022-50020
published 2025-06-18CVE-2022-50020: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
5.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid resizing to a partial cluster size
This patch avoids an attempt to resize the filesystem to an
unaligned cluster boundary. An online resize to a size that is not
integral to cluster size results in the last iteration attempting to
grow the fs by a negative amount, which trips a BUG_ON and leaves the fs
with a corrupted in-memory superblock.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= d77147ff443b255d82c907a632c825b2cc610b10 < 7bdfb01fc5f6b3696728aeb527c50386e0ee09a1 | 7bdfb01fc5f6b3696728aeb527c50386e0ee09a1 |
| linux | linux | >= d77147ff443b255d82c907a632c825b2cc610b10 < a6805b3dcf5cd41f2ae3a03dca43411135b99849 | a6805b3dcf5cd41f2ae3a03dca43411135b99849 |
| linux | linux | >= d77147ff443b255d82c907a632c825b2cc610b10 < 80288883294c5b4ed18bae0d8bd9c4a12f297074 | 80288883294c5b4ed18bae0d8bd9c4a12f297074 |
| linux | linux | >= d77147ff443b255d82c907a632c825b2cc610b10 < 72b850a2a996f72541172e7cf686d54a2b29bcd8 | 72b850a2a996f72541172e7cf686d54a2b29bcd8 |
| linux | linux | >= d77147ff443b255d82c907a632c825b2cc610b10 < 0082e99a9074ff88eff729c70c93454c8588d8e1 | 0082e99a9074ff88eff729c70c93454c8588d8e1 |
| linux | linux | >= d77147ff443b255d82c907a632c825b2cc610b10 < 69cb8e9d8cd97cdf5e293b26d70a9dee3e35e6bd | 69cb8e9d8cd97cdf5e293b26d70a9dee3e35e6bd |
| linux | linux_kernel | < 4.9.326 | 4.9.326 |
| linux | linux_kernel | >= 0 < 5.10.140-1 | 5.10.140-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 4.10 < 4.14.291 | 4.14.291 |
| linux | linux_kernel | >= 4.15 < 4.19.256 | 4.19.256 |
| linux | linux_kernel | >= 4.20 < 5.4.211 | 5.4.211 |
| linux | linux_kernel | >= 5.11 < 5.15.63 | 5.15.63 |
| linux | linux_kernel | >= 5.16 < 5.19.4 | 5.19.4 |
| linux | linux_kernel | >= 5.5 < 5.10.138 | 5.10.138 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ext4: avoid resizing to a partial cluster size
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50020 [MEDIUM] CWE-1284 kernel: ext4: avoid resizing to a partial cluster size
kernel: ext4: avoid resizing to a partial cluster size
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid resizing to a partial cluster size
This patch avoids an attempt to resize the filesystem to an
unaligned cluster boundary. An online resize to a size that is not
integral to cluster size results in the last iteration attempting to
grow the fs by a negative amount, which trips a BUG_ON and leaves the fs
with a corrupted in-memory superblock.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 9) - Affected
Debian
CVE-2022-50020: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: avoid...
vendor_debian·2022·CVSS 5.5
CVE-2022-50020 [MEDIUM] CVE-2022-50020: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: avoid...
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration attempting to grow the fs by a negative amount, which trips a BUG_ON and leaves the fs with a corrupted in-memory superblock.
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved (fixed in 5.10.140-1)
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
OSV
CVE-2022-50020: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to res
osv·2025-06-18·CVSS 5.5
CVE-2022-50020 [MEDIUM] CVE-2022-50020: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to res
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration attempting to grow the fs by a negative amount, which trips a BUG_ON and leaves the fs with a corrupted in-memory superblock.
GHSA
GHSA-hhx5-crr2-8g8p: In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid resizing to a partial cluster size
This patch avoids an attempt to r
ghsa_unreviewed·2025-06-18
CVE-2022-50020 [MEDIUM] CWE-1284 GHSA-hhx5-crr2-8g8p: In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid resizing to a partial cluster size
This patch avoids an attempt to r
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid resizing to a partial cluster size
This patch avoids an attempt to resize the filesystem to an
unaligned cluster boundary. An online resize to a size that is not
integral to cluster size results in the last iteration attempting to
grow the fs by a negative amount, which trips a BUG_ON and leaves the fs
with a corrupted in-memory superblock.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0082e99a9074ff88eff729c70c93454c8588d8e1https://git.kernel.org/stable/c/69cb8e9d8cd97cdf5e293b26d70a9dee3e35e6bdhttps://git.kernel.org/stable/c/72b850a2a996f72541172e7cf686d54a2b29bcd8https://git.kernel.org/stable/c/7bdfb01fc5f6b3696728aeb527c50386e0ee09a1https://git.kernel.org/stable/c/80288883294c5b4ed18bae0d8bd9c4a12f297074https://git.kernel.org/stable/c/a6805b3dcf5cd41f2ae3a03dca43411135b99849
2025-06-18
Published