CVE-2022-50277 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 98.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 15

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose journal inode has the encrypt flag causes a NULL dereference in fscrypt_limit_io_blocks() when the 'inlinecrypt' mount option is used. The problem is that when jbd2_journal_init_inode() calls bmap(), it eventually finds its way into ext4_iomap_begin(), which calls fscrypt_limit_io_blocks(). fscrypt_limit_io_blocks() requires that if the inode is …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel5.18 — 6.0.18+1
▶Debianlinux/linux_kernel< 6.1.4-1+2
▶CVEListV5linux/linux38ea50daa7a447dbcd7031f37a39a1baa163b2ab — 1f7a6626f611aa06d7907aa45b484708dd5ac8bc+3
▶debiandebian/linux< linux 6.1.4-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2022-50277: In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose j↗2025-09-15
▶
GHSA
GHSA-5935-5rv9-4v2p: In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to have encrypt flag Mounting a filesystem whose↗2025-09-15
▶

📋Vendor Advisories

2
Red Hat
kernel: ext4: don't allow journal inode to have encrypt flag↗2025-09-15
▶
Debian
CVE-2022-50277: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: don't...↗2022
▶
CVE-2022-50277 — NULL Pointer Dereference in Linux | cvebase