PT-2025-18596 · Linux+2 · Linux Kernel+2

Published 2022-11-05 · Updated 2025-07-16 · CVE-2022-49879

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the ext4 filesystem. The issue arises when a directory entry has an invalid rec len field, which must be a multiple of 4. A corrupted filesystem image can trigger a BUG() in ext4 rec len to disk(), called from make indexed dir(). This can lead to a kernel BUG at fs/ext4/ext4.h:2413. The fix involves adding a call to ext4 check dir entry() to validate the directory entry, returning -EFSCORRUPTED if the entry is invalid.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Assertion Failure

RCE

Weakness Enumeration

CWE-617

CWE-20

Related Identifiers

BDU:2026-02638

CVE-2022-49879

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:01982-1

SUSE-SU-2025:01995-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_01982-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

SUSE-SU-2025_02334-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 793

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49879.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-49879 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-49879 · Security Note
• https://git.kernel.org/stable/c/999cff2b6ce3b45c08abf793bf55534777421327 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-49879 · Vendor Advisory
• https://git.kernel.org/stable/c/17a0bc9bd697f75cfdf9b378d5eb2d7409c91340 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:01982-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49879 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49879 · Vendor Advisory
• https://git.kernel.org/stable/c/ce1ee2c8827fb6493e91acbd50f664cf2a972c3d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01995-1 · Vendor Advisory