CVE-2022-50379 — Race Condition in Linux
Severity
4.7MEDIUMNVD
EPSS
0.0%
top 98.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 18
Description
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix race between quota enable and quota rescan ioctl
When enabling quotas, at btrfs_quota_enable(), after committing the
transaction, we change fs_info->quota_root to point to the quota root we
created and set BTRFS_FS_QUOTA_ENABLED at fs_info->flags. Then we try
to start the qgroup rescan worker, first by initializing it with a call
to qgroup_rescan_init() - however if that fails we end up freeing the
quota root but we…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6
Affected Packages4 packages
▶CVEListV5linux/linux5d23515be66904fa3b1b5d6bd72d2199cd2447ab — c97f6d528c3f1c83a6b792a8a7928c236c80b8fe+7
Patches
🔴Vulnerability Details
2OSV▶
CVE-2022-50379: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between quota enable and quota rescan ioctl When enabling quotas,↗2025-09-18
GHSA▶
GHSA-ffg2-pg2r-fw6w: In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix race between quota enable and quota rescan ioctl
When enabling quotas↗2025-09-18
📋Vendor Advisories
2💬Community
1Bugzilla▶
CVE-2022-50379 kernel: Linux kernel (btrfs): Use-after-free vulnerability leads to Denial of Service↗2025-09-18