PT-2025-8252 · Linux+1 · Linux Kernel+1

Published 2022-05-06 · Updated 2025-03-02 · CVE-2022-49318

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the f2fs component. The issue was triggered by Syzbot, causing two WARNs in f2fs is valid blkaddr and is bitmap valid. This occurred when the type was DATA GENERIC ENHANCE or DATA GENERIC ENHANCE READ, and the blkaddr was not within the correct range. The call trace for this issue includes functions such as f2fs get node info, read node page, and f2fs iget. The fix involved replacing WARN ON with dump stack to address these warnings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2026-02602

CVE-2022-49318

Affected Products

Astra Linux

Linux Kernel

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49318.json · Exploit
• https://git.kernel.org/stable/c/0a7a1fc7e71eecf2e5053a6c312c9f0dcbb9b8fd · Patch
• https://osv.dev/vulnerability/CVE-2022-49318 · Vendor Advisory
• https://git.kernel.org/stable/c/cd6374af36cc548464d8c47a93fdba7303bb82a4 · Patch
• https://cve.org/CVERecord?id=CVE-2022-49318 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49318 · Security Note
• https://git.kernel.org/stable/c/8c62c5e26345c34d199b4b8c8e69255ba3d0e751 · Patch
• https://git.kernel.org/stable/c/99c09b298e47ebbe345a6da9f268b32a6b0f4582 · Patch
• https://git.kernel.org/stable/c/32bea51fe4c6e92c00403739f7547c89219bea88 · Patch
• https://ubuntu.com/security/CVE-2022-49318 · Vendor Advisory
• https://git.kernel.org/stable/c/dc2f78e2d4cc844a1458653d57ce1b54d4a29f21 · Patch
• https://bdu.fstec.ru/vul/2026-02602 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-49318 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-49318 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-49318 · Vendor Advisory