CVE Database›Document archive›CVE-2022-50021

CVE-2022-50021

kernel: ext4: block range must be validated before use in ext4_mb_clear_bb()

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · June 18, 2025

Updated · June 30, 2026

Description

A use-after-free vulnerability exists in the linux kernel, such thatthe Block range to free is validated in ext4_free_blocks() using ext4_inode_block_valid() and then it's passed to ext4_mb_clear_bb().However, in some situations on bigalloc file system the range might be adjusted after the validation in ext4_free_blocks() which can lead to corrupted file systems

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 · Use After Free