https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:34:53 +0000 https://vulnerability.circl.lu/vuln/cve-2022-50746 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>erofs: validate the extent length for uncompressed pclusters</p> <p>syzkaller reported a KASAN use-after-free: https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2</p> <p>The referenced fuzzed image actually has two issues: - m_pa == 0 as a non-inlined pcluster; - The logical length is longer than its physical length.</p> <p>The first issue has already been addressed. This patch addresses the second issue by checking the extent length validity.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>erofs: validate the extent length for uncompressed pclusters</p> <p>syzkaller reported a KASAN use-after-free: https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2</p> <p>The referenced fuzzed image actually has two issues: - m_pa == 0 as a non-inlined pcluster; - The logical length is longer than its physical length.</p> <p>The first issue has already been addressed. This patch addresses the second issue by checking the extent length validity.</p> https://vulnerability.circl.lu/vuln/cve-2022-50746