PT-2025-37615 · Linux+2 · Linux Kernel+2

Published

2024-04-30

·

Updated

2025-09-26

·

CVE-2022-50313

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw where a crafted negative i size field can cause a warning due to order exceeding the maximum order. This occurs because the i size field is a signed type, and negative values are incorrectly handled as fast symlinks. The issue was reported by syzbot.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

Related Identifiers

BDU:2025-12487
CVE-2022-50313
OESA-2025-2349
OESA-2025-2350
RHSA-2024:2394
RHSA-2024_2394

Affected Products

Astra Linux
Linux Kernel
Red Hat