PT-2025-38015

CVE-2022-50346

·

Published

2022-12-08

·

Updated

2026-07-25

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A vulnerability exists in the Linux kernel related to the ext4 rename function. Specifically, the issue arises when renaming files and involves failing to initialize quota information for the 'old.inode', potentially leading to warnings and errors during the process of expanding 'extra isize' and allocating blocks. The vulnerability was discovered through Syzbot testing and involves modifying the 'old.inode' ctime and marking the inode as dirty, which can trigger the expansion of 'extra isize' and block allocation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1778266904
RHSA-2024:2394
RHSA-2024:3138
SUSE-SU-2025:03614-1
SUSE-SU-2025:03615-1
SUSE-SU-2025:03628-1
SUSE-SU-2025:3716-1
SUSE-SU-2025:3761-1
Found an issue in the description? Have something to add? Feel free to write us 👾