CVE-2022-50815

Linux Kernel - Denial of Service via Crafted ext2 Filesystem

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ext2: Add sanity checks for group and filesystem size Add sanity check that filesystem size does not exceed the underlying device size and that group size is big enough so that metadata can fit into it. This avoid trying to mount some crafted filesystems with extremely large group counts.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/40ff52527daec00cf1530c17a95636916ddd3b38

Patch

https://git.kernel.org/stable/c/321440079763998076b75e0c802524e2218a7d97

Patch

https://git.kernel.org/stable/c/d766f2d1e3e3bd44024a7f971ffcf8b8fbb7c5d2

Scores

EPSS 0.0021

EPSS Percentile 10.8%

Details

Status published

Products (10)

linux/Kernel 2.6.12 - 5.19.17linux

linux/Kernel 5.20.0 - 6.0.3linux

Linux/Linux < 2.6.12

Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 321440079763998076b75e0c802524e2218a7d97

Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 40ff52527daec00cf1530c17a95636916ddd3b38

Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - d766f2d1e3e3bd44024a7f971ffcf8b8fbb7c5d2

Linux/Linux 2.6.12

Linux/Linux 5.19.17 - 5.19.*

Linux/Linux 6.0.3 - 6.0.*

Linux/Linux 6.1

Published Dec 30, 2025

Tracked Since Feb 18, 2026