{"id":"CVE-2022-50485","state":"PUBLISHED","title":"ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode","description":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: add EXT4_IGET_BAD flag to prevent unexpected bad inode\n\nThere are many places that will get unhappy (and crash) when ext4_iget()\nreturns a bad inode. However, if iget the boot loader inode, allows a bad\ninode to be returned, because the inode may not be initialized. This\nmechanism can be used to bypass some checks and cause panic. To solve this\nproblem, we add a special iget flag EXT4_IGET_BAD. Only with this flag\nwe'd be returning bad inode from ext4_iget(), otherwise we always return\nthe error code if the inode is bad inode.(suggested by Jan Kara)","publishedAt":"2025-10-04T15:16:43.093Z","updatedAt":"2026-05-11T19:20:24.290Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"2142dfa1de61e25b83198af0308ec7689cca25d3","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"f7e6b5548f915d7aa435d0764d41eacfb49c6e09","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"f725b290ed79ad61e4f721fee95a287892d8b1ad","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"488a5c2bf7543c3cd3f07a025f2e62be91599430","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/ext4/ext4.h","fs/ext4/inode.c","fs/ext4/ioctl.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.10","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.10","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.87","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.18","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.4","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/ext4/ext4.h","fs/ext4/inode.c","fs/ext4/ioctl.c"]}],"references":["https://git.kernel.org/stable/c/2142dfa1de61e25b83198af0308ec7689cca25d3","https://git.kernel.org/stable/c/c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5","https://git.kernel.org/stable/c/f7e6b5548f915d7aa435d0764d41eacfb49c6e09","https://git.kernel.org/stable/c/f725b290ed79ad61e4f721fee95a287892d8b1ad","https://git.kernel.org/stable/c/488a5c2bf7543c3cd3f07a025f2e62be91599430","https://git.kernel.org/stable/c/63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023"],"weaknesses":[],"ingestedAt":"2026-10-29T20:05:26.763Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/50xxx/CVE-2022-50485.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2022-50485","state":"PUBLISHED","datePublished":"2025-10-04T15:16:43.093Z","dateUpdated":"2026-05-11T19:20:24.290Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-10-04T15:13:33.468Z"},"containers":{"cna":{"title":"ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: add EXT4_IGET_BAD flag to prevent unexpected bad inode\n\nThere are many places that will get unhappy (and crash) when ext4_iget()\nreturns a bad inode. However, if iget the boot loader inode, allows a bad\ninode to be returned, because the inode may not be initialized. This\nmechanism can be used to bypass some checks and cause panic. To solve this\nproblem, we add a special iget flag EXT4_IGET_BAD. Only with this flag\nwe'd be returning bad inode from ext4_iget(), otherwise we always return\nthe error code if the inode is bad inode.(suggested by Jan Kara)"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"2142dfa1de61e25b83198af0308ec7689cca25d3","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"f7e6b5548f915d7aa435d0764d41eacfb49c6e09","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"f725b290ed79ad61e4f721fee95a287892d8b1ad","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"488a5c2bf7543c3cd3f07a025f2e62be91599430","versionType":"git"},{"version":"393d1d1d76933886d5e1ce603214c9987589c6d5","status":"affected","lessThan":"63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/ext4/ext4.h","fs/ext4/inode.c","fs/ext4/ioctl.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.10","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.10","versionType":"semver"},{"version":"5.4.229","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.163","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.87","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.0.18","status":"unaffected","lessThanOrEqual":"6.0.*","versionType":"semver"},{"version":"6.1.4","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/ext4/ext4.h","fs/ext4/inode.c","fs/ext4/ioctl.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/2142dfa1de61e25b83198af0308ec7689cca25d3"},{"url":"https://git.kernel.org/stable/c/c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5"},{"url":"https://git.kernel.org/stable/c/f7e6b5548f915d7aa435d0764d41eacfb49c6e09"},{"url":"https://git.kernel.org/stable/c/f725b290ed79ad61e4f721fee95a287892d8b1ad"},{"url":"https://git.kernel.org/stable/c/488a5c2bf7543c3cd3f07a025f2e62be91599430"},{"url":"https://git.kernel.org/stable/c/63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:20:24.290Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"5.4.229"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"5.10.163"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"5.15.87"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"6.0.18"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"6.1.4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"6.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}