PT-2025-38015 · Linux+2 · Linux Kernel+2

Published 2022-12-08 · Updated 2025-10-23 · CVE-2022-50346

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability exists in the Linux kernel related to the ext4 rename function. Specifically, the issue arises when renaming files and involves failing to initialize quota information for the 'old.inode', potentially leading to warnings and errors during the process of expanding 'extra isize' and allocating blocks. The vulnerability was discovered through Syzbot testing and involves modifying the 'old.inode' ctime and marking the inode as dirty, which can trigger the expansion of 'extra isize' and block allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Allocation of Resources Without Limits

Weakness Enumeration

CWE-908

CWE-770

Related Identifiers

BDU:2026-04867

CVE-2022-50346

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 996

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50346.json · Exploit
• https://git.kernel.org/stable/c/33fd7031d634f3b46e59f61adfbb0ea9fe514fef · Patch
• https://git.kernel.org/stable/c/84a2f2ed49d6a4d92b354219077434c57d334620 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50346 · Security Note
• https://git.kernel.org/stable/c/135ba9146f4d38abed48a540ef8a8770ff0bd34f · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50346 · Vendor Advisory
• https://git.kernel.org/stable/c/fae381a3d79bb94aa2eb752170d47458d778b797 · Patch
• https://git.kernel.org/stable/c/7dfb8259f66faafa68d23a261b284d2c2c67649b · Patch
• https://osv.dev/vulnerability/CVE-2022-50346 · Vendor Advisory
• https://git.kernel.org/stable/c/67f6d5a4043f3db0c6bb0e14a0d97a7be8bfb8b5 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50346 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/def7a39091e60e1c4a2f623629082a00092602be · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory