PT-2025-38420 · Linux+2 · Linux Kernel+2

Published 2023-05-09 · Updated 2025-09-18 · CVE-2022-50403

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue in ext4 related to undefined behavior in a bit shift operation within the ext4 check flag values function. Shifting a signed 32-bit value by 31 bits is undefined, and the code was modified to change the significant bit to unsigned to address this. This issue was identified through Undefined Behavior Sanitizer (UBSAN) warnings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CESA-2024_3138

CVE-2022-50403

RHSA-2023:2458

RHSA-2023_2458

RHSA-2024:3138

RHSA-2024_3138

Affected Products

Centos

Linux Kernel

Red Hat

References · 19

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50403 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50403 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-23947.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50403 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50403 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50403 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50403 · Security Note
• https://git.kernel.org/stable/c/f9cd6980800bbfd11bf94eb5f942049d4d4eaa52 · Note
• https://git.kernel.org/linus/3bf678a0f9c017c9ba7c581541dbc8453452a7ae · Note
• https://git.kernel.org/stable/c/3bf678a0f9c017c9ba7c581541dbc8453452a7ae · Note
• https://lore.kernel.org/linux-cve-announce/2025091852-CVE-2022-50403-0471@gregkh/T · Note
• https://git.kernel.org/stable/c/d7f93fc6fba8ff017be871be7edf8614a785ccad · Note
• https://git.kernel.org/stable/c/7753d6657873a2523a9989e6c09090cd503bbcda · Note
• https://twitter.com/CVEnew/status/1968718076406546838 · Twitter Post
• https://git.kernel.org/stable/c/205ac16628aca9093931fcbdb4bcd00d0eb94132 · Note