PT-2025-38013 · Linux+5 · Linux Kernel+5
CVE-2022-50344
·
Publicado
2022-09-29
·
Atualizado
2025-10-23
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A null-pointer dereference issue was identified in the ext4 filesystem within the Linux kernel. The vulnerability occurs during the
ext4 write info function, potentially triggered during filesystem unmounting (umount) and related operations like dquot writeback dquots, ext4 sync fs, and generic shutdown super. The root cause involves a null pointer being dereferenced when accessing the inode of the root directory (s root) after it has been set to NULL during the unmount process. The call trace indicates the issue originates from exit to user mode prepare and propagates through filesystem shutdown routines.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Centos
Linux Kernel
Red Hat
Suse
Ext4