Riskcovery

CVE-2022-48712

ext4: fix error handling in ext4_fc_record_modified_inode()

State
Published
Severity
Not scored
Published
Jun 20, 2024
Updated
May 11, 2026
Reserved
Jun 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix error handling in ext4_fc_record_modified_inode()

Current code does not fully takes care of krealloc() error case, which could lead to silent memory corruption or a kernel bug. This patch fixes that.

Also it cleans up some duplicated error handling logic from various functions in fast_commit.c file.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 to before 62e46e0ffc02daa8fcfc02f7a932cc8a19601b19Affected
  • 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 to before 1b6762ecdf3cf12113772427c904aa3c420a1802Affected
  • 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 to before 14aa3f49c7fc6424763f4323bfbc3a807b0727dcAffected
  • 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 to before cdce59a1549190b66f8e3fe465c2b2f714b98a94Affected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.99 through 5.10.*Not affected
  • 5.15.22 through 5.15.*Not affected
  • 5.16.8 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.