CVE-2022-49343

ext4: avoid cycles in directory h-tree

State: Published
Severity: 7.8 High
Published: Feb 26, 2025
Updated: Aug 5, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: avoid cycles in directory h-tree

A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its hands while doing a node split and consequently accessing unallocated memory. Fix the problem by verifying traversed block numbers are unique.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 24b8206fec1db21d7e82f21f0b2ff5e5672cf5b3Affected ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before b3ad9ff6f06c1dc6abf7437691c88ca3d6da3ac0Affected ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before e157c8f87e8fac112d6c955e69a60cdb9bc80a60Affected ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before ff4cafa51762da3824881a9000ca421d4b78b138Affected ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 3a3ce941645407cd0b0b7f01ad9e2ea3770f46ccAffected ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before d5a16a6df2c16eaf4de04948553ef0089dee463fAffected ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 6084240bfc44bf265ab6ae7d96980469b05be0f1Affected ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 3ba733f879c2a88910744647e41edeefbc0d92b2Affected
LinuxLinux	2.6.19Affected before 2.6.19Not affected 4.14.283 through 4.14.Not affected 4.19.247 through 4.19.Not affected 5.4.198 through 5.4.Not affected 5.10.121 through 5.10.Not affected 5.15.46 through 5.15.Not affected 5.17.14 through 5.17.Not affected 5.18.3 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 24b8206fec1db21d7e82f21f0b2ff5e5672cf5b3Affected
ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before b3ad9ff6f06c1dc6abf7437691c88ca3d6da3ac0Affected
ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before e157c8f87e8fac112d6c955e69a60cdb9bc80a60Affected
ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before ff4cafa51762da3824881a9000ca421d4b78b138Affected
ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 3a3ce941645407cd0b0b7f01ad9e2ea3770f46ccAffected
ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before d5a16a6df2c16eaf4de04948553ef0089dee463fAffected
ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 6084240bfc44bf265ab6ae7d96980469b05be0f1Affected
ac27a0ec112a089f1a5102bc8dffc79c8c815571 to before 3ba733f879c2a88910744647e41edeefbc0d92b2Affected

LinuxLinux

2.6.19Affected
before 2.6.19Not affected
4.14.283 through 4.14.*Not affected
4.19.247 through 4.19.*Not affected
5.4.198 through 5.4.*Not affected
5.10.121 through 5.10.*Not affected
5.15.46 through 5.15.*Not affected
5.17.14 through 5.17.*Not affected
5.18.3 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.