CVE-2022-50519: nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: replace WARNONs by nilfserror for checkpoint acquisition failure
If creation or finalization of a checkpoint fails due to anomalies in the checkpoint metadata on disk, a kernel warning is generated.
This patch replaces the WARNONs by nilfserror, so that a kernel, booted with paniconwarn, does not panic. A nilfserror is appropriate here to handle the abnormal filesystem condition.
This also replaces the detected error codes with an I/O error so that neither of the internal error codes is returned to callers.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50519?
CVE-2022-50519 is considered a moderate severity vulnerability due to potential kernel warnings on checkpoint acquisition failures.
How do I fix CVE-2022-50519?
To fix CVE-2022-50519, update to the latest version of the Linux kernel where this vulnerability has been addressed.
What software is affected by CVE-2022-50519?
CVE-2022-50519 affects versions of the Linux kernel that utilize the nilfs2 file system.
What type of exploitation does CVE-2022-50519 involve?
CVE-2022-50519 involves issuing kernel warnings when checkpoint metadata anomalies occur, which can indicate underlying filesystem issues.
Is CVE-2022-50519 a remote or local vulnerability?
CVE-2022-50519 is primarily a local vulnerability that affects user-level interactions with the kernel.