CVE-2022-49171
kernel: ext4: don't BUG if someone dirty pages without asking ext4 first
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 26, 2025
Updated · November 4, 2026
Description
A flaw in the Linux kernel’s ext4 filesystem allows memory pages to be modified without properly notifying the filesystem. This lack of synchronization can lead to inconsistent file states or system crashes, particularly in high-concurrency scenarios. The vulnerability is caused by a race condition where memory marked as "dirty" isn't communicated correctly to ext4, making it unaware of pending changes. As an interim mitigation, newer kernels issue warnings and mark affected memory pages as clean to prevent exploitation, especially by unprivileged users attempting denial-of-service attacks. Updating to a patched kernel version is recommended to ensure system reliability and data integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-99 · Improper Control of Resource Identifiers