CVE-2022-50328

jbd2: fix potential use-after-free in jbd2_fc_wait_bufs

State: Published
Severity: 7.8 High
Published: Sep 15, 2025
Updated: Oct 15, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

jbd2: fix potential use-after-free in jbd2_fc_wait_bufs

In 'jbd2_fc_wait_bufs' use 'bh' after put buffer head reference count which may lead to use-after-free. So judge buffer if uptodate before put buffer head reference count.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ff780b91efe901b8eecd8114785abae5341820ad to before 1d4d16daec2a6689b6d3fbfc7d2078643adc6619Affected ff780b91efe901b8eecd8114785abae5341820ad to before d11d2ded293976a1a0d9d9471827a44dc9e3c63fAffected ff780b91efe901b8eecd8114785abae5341820ad to before 2e6d9f381c1ed844531a577783fc352de7a44c8aAffected ff780b91efe901b8eecd8114785abae5341820ad to before effd9b3c029ecdd853a11933dcf857f5a7ca8c3dAffected ff780b91efe901b8eecd8114785abae5341820ad to before 243d1a5d505d0b0460c9af0ad56ed4a56ef0bebdAffected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.150 through 5.10.Not affected 5.15.75 through 5.15.Not affected 5.19.17 through 5.19.Not affected 6.0.3 through 6.0.Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

ff780b91efe901b8eecd8114785abae5341820ad to before 1d4d16daec2a6689b6d3fbfc7d2078643adc6619Affected
ff780b91efe901b8eecd8114785abae5341820ad to before d11d2ded293976a1a0d9d9471827a44dc9e3c63fAffected
ff780b91efe901b8eecd8114785abae5341820ad to before 2e6d9f381c1ed844531a577783fc352de7a44c8aAffected
ff780b91efe901b8eecd8114785abae5341820ad to before effd9b3c029ecdd853a11933dcf857f5a7ca8c3dAffected
ff780b91efe901b8eecd8114785abae5341820ad to before 243d1a5d505d0b0460c9af0ad56ed4a56ef0bebdAffected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.150 through 5.10.*Not affected
5.15.75 through 5.15.*Not affected
5.19.17 through 5.19.*Not affected
6.0.3 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.