PT-2025-40665 · Linux+1 · Linux Kernel+1

Published

2025-10-04

·

Updated

2025-12-04

·

CVE-2022-50478

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The nilfs2 file system in the Linux kernel contains a flaw in the nilfs sb2 bad offset() function. This function can trigger a shift-out-of-bounds warning and potentially a kernel panic if the block size exponent information in the on-disk superblock is corrupted. Additionally, the computation within the function may overflow if the disk layout parameters are not normal. The issue arises from a lack of sanity checks for these parameters and the use of multiplication and left bit-shifting, which can lead to these problems.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

Related Identifiers

CVE-2022-50478
SUSE-SU-2025:4111-1
SUSE-SU-2025:4139-1
SUSE-SU-2025:4149-1
SUSE-SU-2025:4320-1

Affected Products

Linux Kernel
Suse