CVE-2022-50205

ext2: Add more validity checks for inode counts

State: Published
Severity: Not scored
Published: Jun 18, 2025
Updated: May 11, 2026
Reserved: Jun 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ext2: Add more validity checks for inode counts

Add checks verifying number of inodes stored in the superblock matches the number computed from number of inodes per group. Also verify we have at least one block worth of inodes per group. This prevents crashes on corrupted filesystems.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0bcdc31094a12b4baf59e241feabc9787cf635faAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 07303a9abe3a997d9864fb4315e34b5acfe8fc25Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b3f423683818cfe15de14d5d9dff44148ff16bbfAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d08bb199a406424a8ed0009efdf41710e6d849eeAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 96b18d3a1be0354ccce43f0ef61b5a3d7e432552Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7a48fdc88a3c35e046a6a0a38eba00f21c65b16eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5e63c5fe9123fa76ffaeff26c211308736ec3a07Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa78f336937240d1bc598db817d638086060e7e9Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.14.291 through 4.14.Not affected 4.19.256 through 4.19.Not affected 5.4.211 through 5.4.Not affected 5.10.137 through 5.10.Not affected 5.15.61 through 5.15.Not affected 5.18.18 through 5.18.Not affected 5.19.2 through 5.19.*Not affected 6.0 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0bcdc31094a12b4baf59e241feabc9787cf635faAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 07303a9abe3a997d9864fb4315e34b5acfe8fc25Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b3f423683818cfe15de14d5d9dff44148ff16bbfAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d08bb199a406424a8ed0009efdf41710e6d849eeAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 96b18d3a1be0354ccce43f0ef61b5a3d7e432552Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7a48fdc88a3c35e046a6a0a38eba00f21c65b16eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5e63c5fe9123fa76ffaeff26c211308736ec3a07Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa78f336937240d1bc598db817d638086060e7e9Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.14.291 through 4.14.*Not affected
4.19.256 through 4.19.*Not affected
5.4.211 through 5.4.*Not affected
5.10.137 through 5.10.*Not affected
5.15.61 through 5.15.*Not affected
5.18.18 through 5.18.*Not affected
5.19.2 through 5.19.*Not affected
6.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.