-

CVE-2022-50205

In the Linux kernel, the following vulnerability has been resolved:

ext2: Add more validity checks for inode counts

Add checks verifying number of inodes stored in the superblock matches
the number computed from number of inodes per group. Also verify we have
at least one block worth of inodes per group. This prevents crashes on
corrupted filesystems.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
Product Linux
Default Statusunaffected
Version < 0bcdc31094a12b4baf59e241feabc9787cf635fa
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 07303a9abe3a997d9864fb4315e34b5acfe8fc25
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < b3f423683818cfe15de14d5d9dff44148ff16bbf
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < d08bb199a406424a8ed0009efdf41710e6d849ee
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 96b18d3a1be0354ccce43f0ef61b5a3d7e432552
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 7a48fdc88a3c35e046a6a0a38eba00f21c65b16e
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < 5e63c5fe9123fa76ffaeff26c211308736ec3a07
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
Version < fa78f336937240d1bc598db817d638086060e7e9
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Status affected
VendorLinux
Product Linux
Default Statusaffected
Version <= 4.14.*
Version 4.14.291
Status unaffected
Version <= 4.19.*
Version 4.19.256
Status unaffected
Version <= 5.4.*
Version 5.4.211
Status unaffected
Version <= 5.10.*
Version 5.10.137
Status unaffected
Version <= 5.15.*
Version 5.15.61
Status unaffected
Version <= 5.18.*
Version 5.18.18
Status unaffected
Version <= 5.19.*
Version 5.19.2
Status unaffected
Version <= *
Version 6.0
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.094
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string