CVE-2022-50205

ext2: Add more validity checks for inode counts

MEDIUM

5.5

CVSS Score

Published: June 18, 2025 at 11:03 AM UTC

Updated: June 17, 2026 at 05:22 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: ext2: Add more validity checks for inode counts Add checks verifying number of inodes stored in the superblock matches the number computed from number of inodes per group. Also verify we have at least one block worth of inodes per group. This prevents crashes on corrupted filesystems.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.14.2912.6.12 ≤ v < 4.14.2912.6.12 ≤ v < 4.19.2562.6.12 ≤ v < 5.10.1372.6.12 ≤ v < 5.15.612.6.12 ≤ v < 5.18.182.6.12 ≤ v < 5.19.22.6.12 ≤ v < 5.4.2112.6.12 ≤ v < 6.04.15 ≤ v < 4.19.2564.20 ≤ v < 5.4.2115.11 ≤ v < 5.15.615.16 ≤ v < 5.18.185.19 ≤ v < 5.19.25.5 ≤ v < 5.10.1371da177e4c3f41524e886b7f1b8a0c1fc7321cac2 2.6.12

Vendor states this is fixed in 07303a9abe3a997d9864fb4315e34b5acfe8fc25 (fixed)

Vendor states this is fixed in 0bcdc31094a12b4baf59e241feabc9787cf635fa (fixed)

Vendor states this is fixed in 5e63c5fe9123fa76ffaeff26c211308736ec3a07 (fixed)

Vendor states this is fixed in 7a48fdc88a3c35e046a6a0a38eba00f21c65b16e (fixed)

Vendor states this is fixed in 96b18d3a1be0354ccce43f0ef61b5a3d7e432552 (fixed)

Vendor states this is fixed in b3f423683818cfe15de14d5d9dff44148ff16bbf (fixed)

Vendor states this is fixed in d08bb199a406424a8ed0009efdf41710e6d849ee (fixed)

Vendor states this is fixed in fa78f336937240d1bc598db817d638086060e7e9 (fixed)

Vendor states this is fixed in 2.6.12 (unaffected)

Vendor states this is fixed in 4.14.291 (unaffected)

Vendor states this is fixed in 4.19.256 (unaffected)

Vendor states this is fixed in 5.10.137 (unaffected)