PT-2025-49704 · Linux+3 · Linux Kernel+3
Published
2022-12-08
·
Updated
2026-02-24
·
CVE-2022-50673
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0-rc3-next #370
Description
A use-after-free issue exists in the ext4 filesystem's orphan inode cleanup routine. Specifically, when the
ext4 inode attach jinode() function fails with -ENOMEM during orphan cleanup at mount time, the error is not correctly handled. This leads to the inode being freed by iput(), while the orphan list continues to point to the freed inode number. Subsequently, during the next loop iteration, the freed inode structure is reused, resulting in a use-after-free condition when attempting to add it to the orphan list. The vulnerable code path involves the ext4 orphan cleanup() function and the list add valid() function.Recommendations
Update to Linux kernel version 6.1.0-rc3-next #370 or a later version that includes the fix.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Rocky Linux
Ext4