CVE-2022-50839 — Improper Update of Reference Count in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 92.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
jbd2: fix potential buffer head reference count leak
As in 'jbd2_fc_wait_bufs' if buffer isn't uptodate, will return -EIO without
update 'journal->j_fc_off'. But 'jbd2_fc_release_bufs' will release buffer head
from ‘j_fc_off - 1’ if 'bh' is NULL will terminal release which will lead to
buffer head buffer head reference count leak.
To solve above issue, update 'journal->j_fc_off' before return -EIO.
Affected Packages4 packages
▶CVEListV5linux/linuxff780b91efe901b8eecd8114785abae5341820ad — 7a33dde572fceb45d02d188e0213c47059401c93+5
🔴Vulnerability Details
3GHSA▶
GHSA-mjvq-c742-r5cx: In the Linux kernel, the following vulnerability has been resolved:
jbd2: fix potential buffer head reference count leak
As in 'jbd2_fc_wait_bufs' i↗2025-12-30
OSV▶
CVE-2022-50839: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix potential buffer head reference count leak As in 'jbd2_fc_wait_bufs' if↗2025-12-30