CVE-2022-50020

ext4: avoid resizing to a partial cluster size

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration attempting to grow the fs by a negative amount, which trips a BUG_ON and leaves the fs with a corrupted in-memory superblock.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/53f62a4201be1cfc1e3c971e566888b182c3ffb0
https://git.kernel.org/stable/c/952b3dc02baaae6a69c71c0aca23e06741182d9a
https://git.kernel.org/stable/c/7bdfb01fc5f6b3696728aeb527c50386e0ee09a1
https://git.kernel.org/stable/c/a6805b3dcf5cd41f2ae3a03dca43411135b99849
https://git.kernel.org/stable/c/80288883294c5b4ed18bae0d8bd9c4a12f297074
https://git.kernel.org/stable/c/72b850a2a996f72541172e7cf686d54a2b29bcd8
https://git.kernel.org/stable/c/0082e99a9074ff88eff729c70c93454c8588d8e1
https://git.kernel.org/stable/c/69cb8e9d8cd97cdf5e293b26d70a9dee3e35e6bd

Frequently Asked Questions

What is the severity of CVE-2022-50020?: CVE-2022-50020 has not yet been assigned a CVSS score.
How to fix CVE-2022-50020?: To fix CVE-2022-50020, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-50020 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-50020 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-50020?: CVE-2022-50020 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.