CVE-2022-50845 | THREATINT

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4_xattr_inode_create() on an error path There is issue as follows when do setxattr with inject fault: [localhost]# fsck.ext4 -fn /dev/sda e2fsck 1.46.6-rc1 (12-Sep-2022) Pass 1: Checking inodes, blocks, and sizes Pass 2: Checking directory structure Pass 3: Checking directory connectivity Pass 4: Checking reference counts Unattached zero-length inode 15. Clear? no Unattached inode 15 Connect to /lost+found? no Pass 5: Checking group summary information /dev/sda: ********** WARNING: Filesystem still has errors ********** /dev/sda: 15/655360 files (0.0% non-contiguous), 66755/2621440 blocks This occurs in 'ext4_xattr_inode_create()'. If 'ext4_mark_inode_dirty()' fails, dropping i_nlink of the inode is needed. Or will lead to inode leak.

PUBLISHED Reserved 2025-12-30 | Published 2025-12-30 | Updated 2025-12-30 | Assigner Linux

Product status

Default status

unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 0f709e08caffb41bbc9b38b9a4c1bd0769794007

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before eab94a46560f68d4bcd15222701ced479f84f427

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 9ef603086c5b796fde1c7f22a17d0fc826ba54cb

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 9882601ee689975c1c0076ee65bf222a2a35e535

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 322cf639b0b7f137543072c55545adab782b3a25

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before fdaaf45786dc8c17a72901021772520fceb18f8c

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before 70e5b46beba64706430a87a6d516054225e8ac8a

affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 (git) before e4db04f7d3dbbe16680e0ded27ea2a65b10f766a

affected

Default status

affected

4.14.303 (semver)

unaffected

4.19.270 (semver)

unaffected

5.4.229 (semver)

unaffected

5.10.163 (semver)

unaffected

5.15.87 (semver)

unaffected

6.0.18 (semver)

unaffected

6.1.4 (semver)

unaffected

6.2 (original_commit_for_fix)

unaffected

References

git.kernel.org/...c/0f709e08caffb41bbc9b38b9a4c1bd0769794007

git.kernel.org/...c/eab94a46560f68d4bcd15222701ced479f84f427

git.kernel.org/...c/9ef603086c5b796fde1c7f22a17d0fc826ba54cb

git.kernel.org/...c/9882601ee689975c1c0076ee65bf222a2a35e535

git.kernel.org/...c/322cf639b0b7f137543072c55545adab782b3a25

git.kernel.org/...c/fdaaf45786dc8c17a72901021772520fceb18f8c

git.kernel.org/...c/70e5b46beba64706430a87a6d516054225e8ac8a

git.kernel.org/...c/e4db04f7d3dbbe16680e0ded27ea2a65b10f766a

cve.org (CVE-2022-50845)

nvd.nist.gov (CVE-2022-50845)

Download JSON