NetSight
medium5.5

CVE-2022-50205

In the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes store…

Impact

In the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes stored in the superblock matches the number computed from number of inodes per group. Also verify we have at least one block worth of inodes per group. This prevents crashes on corrupted filesystems.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.14.291
from 4.15 before 4.19.256
from 4.20 before 5.4.211
from 5.5 before 5.10.137
from 5.11 before 5.15.61
from 5.16 before 5.18.18

References