PT-2025-37588 · Linux+2 · Linux Kernel+2

Published 2022-12-08 · Updated 2025-10-23 · CVE-2022-50286

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw where converting files with inline data to extents, with both bigalloc and inline options enabled, can lead to invalid extent status cache content, incorrect reserved cluster counts, kernel memory leaks, and potential kernel panics. This occurs because the code incorrectly searches a non-existent extent tree during delayed allocation, caching invalid data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2026-02357

CVE-2022-50286

RHSA-2024:2394

RHSA-2024:3138

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 870

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50286.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50286 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50286 · Vendor Advisory
• https://git.kernel.org/stable/c/c0c8edbc8abbe8f16d80a1d794d1ba2c12b6f193 · Patch
• https://git.kernel.org/stable/c/81b915181c630ee1cffa052e52874fe4e1ba91ac · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50286 · Vendor Advisory
• https://git.kernel.org/stable/c/131294c35ed6f777bd4e79d42af13b5c41bf2775 · Patch
• https://git.kernel.org/stable/c/d440d6427a5e3a877c1c259b8d2b216ddb65e185 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6f4200ec76a0d31200c308ec5a71c68df5417004 · Patch
• https://ubuntu.com/security/CVE-2022-50286 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02357 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50286 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50286 · Security Note