PT-2025-26131 · Linux+1 · Linux Kernel+1

Published 2022-07-26 · Updated 2025-06-18 · CVE-2022-50205

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel, specifically the ext2 filesystem. It involves adding more validity checks for inode counts to prevent crashes on corrupted filesystems. The checks verify that the number of inodes stored in the superblock matches the number computed from the number of inodes per group and ensure there is at least one block worth of inodes per group.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-04512

CVE-2022-50205

Affected Products

Astra Linux

Linux Kernel

References · 26

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50205.json · Exploit
• https://git.kernel.org/stable/c/7a48fdc88a3c35e046a6a0a38eba00f21c65b16e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50205 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50205 · Vendor Advisory
• https://git.kernel.org/stable/c/5e63c5fe9123fa76ffaeff26c211308736ec3a07 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50205 · Security Note
• https://git.kernel.org/stable/c/b3f423683818cfe15de14d5d9dff44148ff16bbf · Patch
• https://git.kernel.org/stable/c/96b18d3a1be0354ccce43f0ef61b5a3d7e432552 · Patch
• https://git.kernel.org/stable/c/fa78f336937240d1bc598db817d638086060e7e9 · Patch
• https://git.kernel.org/stable/c/d08bb199a406424a8ed0009efdf41710e6d849ee · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50205 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04512 · Security Note
• https://git.kernel.org/stable/c/07303a9abe3a997d9864fb4315e34b5acfe8fc25 · Patch
• https://ubuntu.com/security/CVE-2022-50205 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50205 · Vendor Advisory