Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49343

ext4: avoid cycles in directory h-tree

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its hands while doing a node split and consequently accessing unallocated memory. Fix the problem by verifying traversed block numbers are unique.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ac27a0ec112a089f1a5102bc8dffc79c8c815571 to < 24b8206fec1db21d7e82f21f0b2ff5e5672cf5b3affected
  • ac27a0ec112a089f1a5102bc8dffc79c8c815571 to < b3ad9ff6f06c1dc6abf7437691c88ca3d6da3ac0affected
  • ac27a0ec112a089f1a5102bc8dffc79c8c815571 to < e157c8f87e8fac112d6c955e69a60cdb9bc80a60affected
  • ac27a0ec112a089f1a5102bc8dffc79c8c815571 to < ff4cafa51762da3824881a9000ca421d4b78b138affected
  • ac27a0ec112a089f1a5102bc8dffc79c8c815571 to < 3a3ce941645407cd0b0b7f01ad9e2ea3770f46ccaffected
  • ac27a0ec112a089f1a5102bc8dffc79c8c815571 to < d5a16a6df2c16eaf4de04948553ef0089dee463faffected
  • ac27a0ec112a089f1a5102bc8dffc79c8c815571 to < 6084240bfc44bf265ab6ae7d96980469b05be0f1affected
  • ac27a0ec112a089f1a5102bc8dffc79c8c815571 to < 3ba733f879c2a88910744647e41edeefbc0d92b2affected

Linux Linux

Default version status: affected

  • 2.6.19affected
  • 0 to < 2.6.19unaffected
  • 4.14.283 to ≤ 4.14.*unaffected
  • 4.19.247 to ≤ 4.19.*unaffected
  • 5.4.198 to ≤ 5.4.*unaffected
  • 5.10.121 to ≤ 5.10.*unaffected
  • 5.15.46 to ≤ 5.15.*unaffected
  • 5.17.14 to ≤ 5.17.*unaffected
  • 5.18.3 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References