CVE-2022-50815

A flaw was found in the Linux kernel's ext2 filesystem implementation. The filesystem mount code lacks proper validation of filesystem size against the underlying device size and group size against metadata requirements. This allows specially crafted ext2 filesystem images with extremely large group counts to be mounted, potentially causing resource exhaustion or kernel crashes.

Mounting untrusted filesystem images is an inherently risky operation. This flaw requires an attacker to have local access and the ability to provide a maliciously crafted ext2 filesystem image for mounting. In enterprise environments, filesystem mounting is typically restricted to privileged users, limiting the attack surface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.