PT-2025-37575 · Linux+2 · Linux Kernel+2

Published 2025-09-15 · Updated 2025-09-20 · CVE-2022-50273

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's f2fs file system related to data block recovery. An inconsistency between the SIT table and inode mapping table can trigger a warning during SIT table updates. Enabling the CONFIG F2FS CHECK FS configuration option results in a kernel panic instead of a warning. The issue arises from an incorrect state during the update of the SIT (Segment Information Table) entry. The patch introduces a new flag, DATA GENERIC ENHANCE UPDATE, to validate the destination block address in the SIT table during data block recovery, preventing the inconsistent status.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50273

Affected Products

Astra Linux

Linux Kernel

F2Fs

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50273.json · Exploit
• https://git.kernel.org/stable/c/68b1e607559d3dc85f94b0d738d7c4e8029b0cfa · Patch
• https://git.kernel.org/stable/c/0ef4ca04a3f9223ff8bc440041c524b2123e09a3 · Patch
• https://ubuntu.com/security/CVE-2022-50273 · Vendor Advisory
• https://git.kernel.org/stable/c/3a4d24d746866dd45d970bd565ff3886e839366a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50273 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50273 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50273 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50273 · Vendor Advisory
• https://git.kernel.org/stable/c/ed854f10e6afd5cbd5c3274d4c4df4bfe0ab4362 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50273 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50273 · Vendor Advisory
• https://git.kernel.org/stable/c/8f0a47def4722c5fd8d6b9268b5ffed8a249e2db · Patch
• https://git.kernel.org/stable/c/73fb4bd2c055a393816f078f158cdd3025006f1d · Patch
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note