PT-2025-38013 · Linux+5 · Linux Kernel+5

Published 2022-09-29 · Updated 2025-10-23 · CVE-2022-50344

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null-pointer dereference issue was identified in the ext4 filesystem within the Linux kernel. The vulnerability occurs during the ext4 write info function, potentially triggered during filesystem unmounting (umount) and related operations like dquot writeback dquots, ext4 sync fs, and generic shutdown super. The root cause involves a null pointer being dereferenced when accessing the inode of the root directory (s root) after it has been set to NULL during the unmount process. The call trace indicates the issue originates from exit to user mode prepare and propagates through filesystem shutdown routines.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2026-04864

CESA-2024_3138

CVE-2022-50344

RHSA-2023:2458

RHSA-2023_2458

RHSA-2024:3138

RHSA-2024_3138

SUSE-SU-2025:03613-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Ext4

References · 1015

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50344.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4a657319cfabd6199fd0b7b65bbebf6ded7a11c1 · Patch
• https://osv.dev/vulnerability/CVE-2022-50344 · Vendor Advisory
• https://git.kernel.org/stable/c/dc451578446afd03c0c21913993c08898a691435 · Patch
• https://git.kernel.org/stable/c/bb420e8afc854d2a1caaa23a0c129839acfb7888 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50344 · Security Note
• https://git.kernel.org/stable/c/f4b5ff0b794aa94afac7269c494550ca2f66511b · Patch
• https://bdu.fstec.ru/vul/2026-04864 · Security Note
• https://git.kernel.org/stable/c/3638aa1c7d87c0ca0aef23cf58cae2c48e7daca4 · Patch
• https://ubuntu.com/security/CVE-2022-50344 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50344 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50344 · Vendor Advisory