CVE Database›CVE-2022-49171

CVE-2022-49171

kernel: ext4: don't BUG if someone dirty pages without asking ext4 first

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · February 26, 2025

Updated · November 4, 2026

Description

A flaw in the Linux kernel’s ext4 filesystem allows memory pages to be modified without properly notifying the filesystem. This lack of synchronization can lead to inconsistent file states or system crashes, particularly in high-concurrency scenarios. The vulnerability is caused by a race condition where memory marked as "dirty" isn't communicated correctly to ext4, making it unaware of pending changes. As an interim mitigation, newer kernels issue warnings and mark affected memory pages as clean to prevent exploitation, especially by unprivileged users attempting denial-of-service attacks. Updating to a patched kernel version is recommended to ensure system reliability and data integrity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-99 · Improper Control of Resource Identifiers