PT-2025-37608 · Ext4+4 · Ext4+4

Published 2022-01-01 · Updated 2026-03-14 · CVE-2022-50306

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions linux (affected versions not specified)

Description The Linux kernel contains a flaw within the ext4 filesystem code. A potential out-of-bounds read can occur in the ext4 fc replay scan() function during journal scanning when mounting a corrupted filesystem image. This is due to insufficient space checks within the scan loop, specifically when handling ADD RANGE, HEAD, and TAIL tags, which read data during the scan process. The tag length must be greater than or equal to the data length being read to prevent the out-of-bounds read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02258

CVE-2022-50306

OESA-2025-2554

OESA-2025-2555

RHSA-2023:2458

RHSA-2023_2458

Affected Products

Astra Linux

Debian

Linux

Red Hat

Ext4

References · 53

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50306.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-23142 · Security Note
• https://git.kernel.org/stable/c/f234294812c9b68d603650d28743eafb718e7ad5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-37915 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-57906 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-56602 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4244 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-53214 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50306 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53728 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50306 · Security Note
• https://git.kernel.org/stable/c/6969367c1500c15eddc38fda12f6d15518ad6d03 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53454 · Security Note
• https://git.kernel.org/stable/c/1b45cc5c7b920fd8bf72e5a888ec7abeadf41e09 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-37992 · Security Note