CVE-2022-50020

In the Linux kernel, the following vulnerability has been resolved:

ext4: avoid resizing to a partial cluster size

This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration attempting to grow the fs by a negative amount, which trips a BUG_ON and leaves the fs with a corrupted in-memory superblock.

Red Hat has classified this vulnerability as having Moderate severity because triggering an online filesystem resize requires privileged access, limiting exposure to authorized administrative users. In typical Red Hat Enterprise Linux environments, ext4 filesystems do not enable the non-default cluster allocation feature, preventing unaligned resizing conditions under standard configurations. Even if an unaligned resize is executed on affected storage, the failure manifests as a kernel crash and denial of service rather than privilege escalation or remote compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.