CVE-2022-50478Out-of-bounds Read in Linux

CWE-125Out-of-bounds Read5 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 97.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() Patch series "nilfs2: fix UBSAN shift-out-of-bounds warnings on mount time". The first patch fixes a bug reported by syzbot, and the second one fixes the remaining bug of the same kind. Although they are triggered by the same super block data anomaly, I divided it into the above two because the details of the issues and how to fix it are different. Both are r

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages4 packages

NVDlinux/linux_kernel2.6.304.9.337+7
Debianlinux/linux_kernel< 5.10.178-1+3
CVEListV5linux/linuxe339ad31f59925b48a92ee3947692fdf9758b8c76b0ea3df56cccd53398d0289f399f19d43136b2e+9
debiandebian/linux< linux 6.1.4-1 (bookworm)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-2gq6-55f4-4v54: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() Patch series2025-10-04
OSV
CVE-2022-50478: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() Patch series "n2025-10-04

📋Vendor Advisories

2
Red Hat
kernel: nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()2025-10-04
Debian
CVE-2022-50478: linux - In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix...2022