CVE-2022-50020: ext4: avoid resizing to a partial cluster size
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid resizing to a partial cluster size
This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration attempting to grow the fs by a negative amount, which trips a BUGON and leaves the fs with a corrupted in-memory superblock.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the described Linux kernel fix: ext4 should avoid resizing to a partial cluster size (the resolved change prevents the last iteration from attempting an unaligned cluster boundary that could trip BUG_ON and leave the filesystem with a corrupted in-memory superblock).
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50020?
CVE-2022-50020 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50020?
To fix CVE-2022-50020, you should update to a patched version of the Linux kernel that addresses this vulnerability.
What does CVE-2022-50020 affect?
CVE-2022-50020 affects the ext4 filesystem within the Linux kernel.
What kind of vulnerability is CVE-2022-50020?
CVE-2022-50020 is a filesystem-related vulnerability that involves resizing the ext4 filesystem to an unaligned cluster size.
Is CVE-2022-50020 a local or remote vulnerability?
CVE-2022-50020 is considered a local vulnerability that could be exploited by users with access to the affected system.