CVE-2022-50126

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc6

Description A vulnerability in the Linux kernel has been resolved, which caused an assertion failure in the jbd2 journal dirty metadata() function when a journal was aborted. This issue occurred due to a race condition between the jbd2 journal commit transaction and jbd2 journal dirty metadata functions. The vulnerability can be triggered by a specific sequence of unlink operations, leading to a kernel bug. The estimated number of potentially affected devices is not specified.

Recommendations For Linux kernel versions prior to 5.19.0-rc6, update to a version that includes the fix for the jbd2 assertion failure. As a temporary workaround, consider disabling the jbd2 journal dirty metadata() function until a patch is available. Restrict access to the vulnerable jbd2 module to minimize the risk of exploitation.