CVE-2022-50638 — Improper Input Validation in Linux

CWE-20 — Improper Input Validation6 documents5 sources
Severity
7.0HIGH
No vector
EPSS
0.1%
top 80.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedDec 9

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search caused by bad boot loader inode We got a issue as fllows: kernel BUG at fs/ext4/extents_status.c:203! invalid opcode: 0000 [#1] PREEMPT SMP CPU: 1 PID: 945 Comm: cat Not tainted 6.0.0-next-20221007-dirty #349 RIP: 0010:ext4_es_end.isra.0+0x34/0x42 RSP: 0018:ffffc9000143b768 EFLAGS: 00010203 RAX: 0000000000000000 RBX: ffff8881769cd0b8 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff…

Affected Packages4 packages

▶Linuxlinux/linux_kernel3.10.0 — 4.9.337+7
▶Debianlinux/linux_kernel< 5.10.178-1+3
▶CVEListV5linux/linux393d1d1d76933886d5e1ce603214c9987589c6d5 — e76ede9d2c9e0af4573342b56d7cdbf757c18084+9
▶debiandebian/linux< linux 6.1.4-1 (bookworm)

🔴Vulnerability Details

3
OSV
CVE-2022-50638: In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search caused by bad boot loader inode We got a issu↗2025-12-09
▶
GHSA
GHSA-3h3j-qpcw-hrmc: In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search caused by bad boot loader inode We got a is↗2025-12-09
▶
OSV
ext4: fix bug_on in __es_tree_search caused by bad boot loader inode↗2025-12-09
▶

📋Vendor Advisories

2
Red Hat
kernel: ext4: fix bug_on in __es_tree_search caused by bad boot loader inode↗2025-12-09
▶
Debian
CVE-2022-50638: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: fix b...↗2022
▶