CVE-2022-48712

HIGH

Linux Kernel - Out-of-bounds Write in ext4_fc_record_modified_inode

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4_fc_record_modified_inode() Current code does not fully takes care of krealloc() error case, which could lead to silent memory corruption or a kernel bug. This patch fixes that. Also it cleans up some duplicated error handling logic from various functions in fast_commit.c file.

References (4)

Core 4

Scores

CVSS v3 7.8
EPSS 0.0023
EPSS Percentile 13.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-787
Status published
Products (15)
linux/Kernel 5.10.0 - 5.10.99linux
linux/Kernel 5.11.0 - 5.15.22linux
linux/Kernel 5.16.0 - 5.16.8linux
Linux/Linux < 5.10
Linux/Linux 5.10
Linux/Linux 5.10.99 - 5.10.*
Linux/Linux 5.15.22 - 5.15.*
Linux/Linux 5.16.8 - 5.16.*
Linux/Linux 5.17
Linux/Linux 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 - 14aa3f49c7fc6424763f4323bfbc3a807b0727dc
... and 5 more
Published Jun 20, 2024
Tracked Since Feb 18, 2026