CVE-2022-50835
kernel: jbd2: add miss release buffer head in fc_do_one_pass()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
A reference count leak was found in the Linux kernel's JBD2 journaling subsystem. The fc_do_one_pass() function, used during fast commit replay, fails to release a buffer head after use. This results in a reference count leak that can prevent proper buffer memory cleanup over time.
Statement
This issue affects ext4 filesystems using the fast commit feature. The buffer head leak occurs during journal recovery operations, which typically happen at mount time. While repeated mount/unmount cycles could accumulate leaked references, the practical security impact is limited as an attacker cannot easily trigger journal recovery without administrative access.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-911 · Improper Update of Reference Count