Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50217

fuse: write inode in fuse_release()

Description

In the Linux kernel, the following vulnerability has been resolved: fuse: write inode in fuse_release() A race between write(2) and close(2) allows pages to be dirtied after fuse_flush -> write_inode_now(). If these pages are not flushed from fuse_release(), then there might not be a writable open file later. So any remaining dirty pages must be written back before the file is released. This is a partial revert of the blamed commit.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 36ea23374d1f7b6a9d96a2b61d38830fdf23e45d to < 5ccb0420b7c9334ab8122037847101931b899301affected
  • 36ea23374d1f7b6a9d96a2b61d38830fdf23e45d to < 4bd9d5d20f344d015422969302d12653c903c271affected
  • 36ea23374d1f7b6a9d96a2b61d38830fdf23e45d to < 035ff33cf4db101250fb980a3941bf078f37a544affected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 5.18.18 to ≤ 5.18.*unaffected
  • 5.19.2 to ≤ 5.19.*unaffected
  • 6.0 to ≤ *unaffected

References