CVE-2022-50333

In the Linux kernel, the following vulnerability has been resolved:

fs: jfs: fix shift-out-of-bounds in dbDiscardAG

This should be applied to most URSAN bugs found recently by syzbot, by guarding the dbMount. As syzbot feeding rubbish into the bmap descriptor.

This vulnerability is evaluated as having a Moderate impact because exploitation requires a local attacker to mount a maliciously crafted file system, restricting the threat scope to systems that permit untrusted storage mounts. The JFS file system is not enabled by default in supported Red Hat Enterprise Linux installations. Therefore, default enterprise deployments without active JFS usage remain unaffected in practice.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.