CVE-2022-50436

MEDIUM

Linux Kernel 5.10.1-6.1.3 ext4_unlink DoS via Transaction Deadlock

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: don't set up encryption key during jbd2 transaction Commit a80f7fcf1867 ("ext4: fixup ext4_fc_track_* functions' signature") extended the scope of the transaction in ext4_unlink() too far, making it include the call to ext4_find_entry(). However, ext4_find_entry() can deadlock when called from within a transaction because it may need to set up the directory's encryption key. Fix this by restoring the transaction to its original scope.

Scores

CVSS v3 5.5
EPSS 0.0009
EPSS Percentile 0.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (18)
linux/Kernel 5.10.0 - 5.10.163linux
linux/Kernel 5.11.0 - 5.15.87linux
linux/Kernel 5.16.0 - 6.0.18linux
linux/Kernel 6.1.0 - 6.1.4linux
Linux/Linux < 5.10
Linux/Linux 5.10
Linux/Linux 5.10.163 - 5.10.*
Linux/Linux 5.15.87 - 5.15.*
Linux/Linux 6.0.18 - 6.0.*
Linux/Linux 6.1.4 - 6.1.*
... and 8 more
Published Oct 01, 2025
Tracked Since Feb 18, 2026