PT-2025-37635 · Linux+3 · Linux Kernel+3

Published 2022-10-27 · Updated 2025-10-23 · CVE-2022-50333

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A shift-out-of-bounds issue was identified and resolved in the JFS filesystem within the Linux kernel, specifically within the dbDiscardAG function. This issue stemmed from syzbot identifying that invalid data was being fed into the bmap descriptor, potentially leading to unexpected behavior. The fix involves guarding the dbMount to address this problem and related URSAN bugs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02263

CVE-2022-50333

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Jfs

Linux Kernel

Suse

References · 872

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50333.json · Exploit
• https://git.kernel.org/stable/c/25e70c6162f207828dd405b432d8f2a98dbf7082 · Patch
• https://git.kernel.org/stable/c/50163a115831ef4e6402db5a7ef487d1989d7249 · Patch
• https://git.kernel.org/stable/c/911999b193735cd378517b6cd5fe585ee345d49c · Patch
• https://git.kernel.org/stable/c/0183c8f46ab5bcd0740f41c87f5141c6ca2bf1bb · Patch
• https://git.kernel.org/stable/c/624843f1bac448150f6859999c72c4841c14a2e3 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50333 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50333 · Vendor Advisory
• https://git.kernel.org/stable/c/ab5cd3d62c2493eca3337e7d0178cc7bd819ca64 · Patch
• https://git.kernel.org/stable/c/f8d4d0bac603616e2fa4a3907e81ed13f8f3c380 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50333 · Vendor Advisory
• https://git.kernel.org/stable/c/10b87da8fae79c7daf5eda6a9e4f1d31b85b4d92 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory