PT-2025-26009 · Linux+3 · Linux Kernel+3

Publicado 2023-05-09 · Atualizado 2025-07-28 · CVE-2022-50083

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where adding an xattr to an inode does not ensure that the inode size is not less than EXT4 GOOD OLD INODE SIZE + extra isize + pad, potentially resulting in a use-after-free (UAF) situation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CESA-2023_7077

CVE-2022-50083

RHSA-2023:2458

RHSA-2023:7077

RHSA-2023_2458

RHSA-2023_7077

RHSA-2024:0412

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02334-1

SUSE-SU-2025_02537-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 736

• https://bugzilla.suse.com/1238275 · Nota
• https://bugzilla.suse.com/1243627 · Nota
• https://bugzilla.suse.com/1239644 · Nota
• https://suse.com/security/cve/CVE-2022-49937 · Nota
• https://git.kernel.org/stable/c/0e69cf833161b29b2e25dcbf2f2b4e70d75b15cf · Nota
• https://bugzilla.suse.com/1245440 · Nota
• https://suse.com/security/cve/CVE-2022-50012 · Nota
• https://bugzilla.suse.com/1234156 · Nota
• https://bugzilla.suse.com/1240224 · Nota
• https://bugzilla.suse.com/1198410 · Nota
• https://suse.com/security/cve/CVE-2022-50221 · Nota
• https://suse.com/security/cve/CVE-2025-23141 · Nota
• https://suse.com/security/cve/CVE-2025-37785 · Nota
• https://suse.com/security/cve/CVE-2022-50085 · Nota
• https://bugzilla.suse.com/1245122 · Nota