PT-2025-49463 · Linux+2 · Linux Kernel+2

Published 2022-09-30 · Updated 2026-02-24 · CVE-2022-50622

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists within the ext4 filesystem code, specifically in the ext4 fc record modified inode() function. The issue arises because krealloc may return NULL, potentially preventing the proper freeing of memory associated with state->fc modified inodes, leading to a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-04635

CVE-2022-50622

RHSA-2023:2458

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

Red Hat

Ext4

References · 980

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50622.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50622 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50622 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50622 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04635 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50622 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50622 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50622 · Security Note
• https://suse.com/security/cve/CVE-2023-53862 · Note
• https://bugzilla.suse.com/1255970 · Note