CVE-2022-49318

f2fs: remove WARN_ON in f2fs_is_valid_blkaddr

State: Published
Severity: 5.5 Medium
Published: Feb 26, 2025
Updated: Aug 15, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: remove WARN_ON in f2fs_is_valid_blkaddr

Syzbot triggers two WARNs in f2fs_is_valid_blkaddr and __is_bitmap_valid. For example, in f2fs_is_valid_blkaddr, if type is DATA_GENERIC_ENHANCE or DATA_GENERIC_ENHANCE_READ, it invokes WARN_ON if blkaddr is not in the right range. The call trace is as follows:

f2fs_get_node_info+0x45f/0x1070 read_node_page+0x577/0x1190 __get_node_page.part.0+0x9e/0x10e0 __get_node_page f2fs_get_node_page+0x109/0x180 do_read_inode f2fs_iget+0x2a5/0x58b0 f2fs_fill_super+0x3b39/0x7ca0

Fix these two WARNs by replacing WARN_ON with dump_stack.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c9b60788fc760d136211853f10ce73dc152d1f4a to before 0a7a1fc7e71eecf2e5053a6c312c9f0dcbb9b8fdAffected c9b60788fc760d136211853f10ce73dc152d1f4a to before 32bea51fe4c6e92c00403739f7547c89219bea88Affected c9b60788fc760d136211853f10ce73dc152d1f4a to before 99c09b298e47ebbe345a6da9f268b32a6b0f4582Affected c9b60788fc760d136211853f10ce73dc152d1f4a to before cd6374af36cc548464d8c47a93fdba7303bb82a4Affected c9b60788fc760d136211853f10ce73dc152d1f4a to before 8c62c5e26345c34d199b4b8c8e69255ba3d0e751Affected c9b60788fc760d136211853f10ce73dc152d1f4a to before dc2f78e2d4cc844a1458653d57ce1b54d4a29f21Affected bdffda8db8d9e0125b9a41edc420c39f9905c6abAffected aafb371575161e315a98dee978b72f9d5357791bAffected ad19d1e78fd51f5b4bf3ebbcbf3a133c8c03c49dAffected 4.4.172 to before 4.5Affected 4.9.144 to before 4.10Affected 4.14.86 to before 4.15Affected
LinuxLinux	4.19Affected before 4.19Not affected 5.4.198 through 5.4.Not affected 5.10.122 through 5.10.Not affected 5.15.47 through 5.15.Not affected 5.17.15 through 5.17.Not affected 5.18.4 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

c9b60788fc760d136211853f10ce73dc152d1f4a to before 0a7a1fc7e71eecf2e5053a6c312c9f0dcbb9b8fdAffected
c9b60788fc760d136211853f10ce73dc152d1f4a to before 32bea51fe4c6e92c00403739f7547c89219bea88Affected
c9b60788fc760d136211853f10ce73dc152d1f4a to before 99c09b298e47ebbe345a6da9f268b32a6b0f4582Affected
c9b60788fc760d136211853f10ce73dc152d1f4a to before cd6374af36cc548464d8c47a93fdba7303bb82a4Affected
c9b60788fc760d136211853f10ce73dc152d1f4a to before 8c62c5e26345c34d199b4b8c8e69255ba3d0e751Affected
c9b60788fc760d136211853f10ce73dc152d1f4a to before dc2f78e2d4cc844a1458653d57ce1b54d4a29f21Affected
bdffda8db8d9e0125b9a41edc420c39f9905c6abAffected
aafb371575161e315a98dee978b72f9d5357791bAffected
ad19d1e78fd51f5b4bf3ebbcbf3a133c8c03c49dAffected
4.4.172 to before 4.5Affected
4.9.144 to before 4.10Affected
4.14.86 to before 4.15Affected

LinuxLinux

4.19Affected
before 4.19Not affected
5.4.198 through 5.4.*Not affected
5.10.122 through 5.10.*Not affected
5.15.47 through 5.15.*Not affected
5.17.15 through 5.17.*Not affected
5.18.4 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.