CVE-2022-50436
MEDIUMLinux Kernel - Info Disclosure
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: ext4: don't set up encryption key during jbd2 transaction Commit a80f7fcf1867 ("ext4: fixup ext4_fc_track_* functions' signature") extended the scope of the transaction in ext4_unlink() too far, making it include the call to ext4_find_entry(). However, ext4_find_entry() can deadlock when called from within a transaction because it may need to set up the directory's encryption key. Fix this by restoring the transaction to its original scope.
References (5)
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
1.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Classification
Status
published
Affected Products (10)
linux/linux_kernel
< 5.10.163
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/linux_kernel
linux/Kernel
< 5.10.163linux
linux/Kernel
< 5.15.87linux
linux/Kernel
< 6.0.18linux
linux/Kernel
< 6.1.4linux
Timeline
Published
Oct 01, 2025
Tracked Since
Feb 18, 2026