CVE-2022-50839

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s jbd2 subsystem related to buffer head reference counting. Specifically, within the jbd2 fc wait bufs function, if a buffer is not up-to-date, the function returns an error without updating journal->j fc off. Subsequently, jbd2 fc release bufs may attempt to release a buffer head from an incorrect offset, potentially leading to a buffer head reference count leak. This occurs when the buffer head (bh) is NULL during the terminal release process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.