GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-49708 (GCVE-0-2022-49708)

Vulnerability from cvelistv5 – Published: 2025-02-26 02:24 – Updated: 2026-05-23 15:22
VLAI
Title
ext4: fix bug_on ext4_mb_use_inode_pa
Summary
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: ================================================================== kernel BUG at fs/ext4/mballoc.c:3211! [...] RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f [...] Call Trace: ext4_mb_new_blocks+0x9df/0x5d30 ext4_ext_map_blocks+0x1803/0x4d80 ext4_map_blocks+0x3a4/0x1a10 ext4_writepages+0x126d/0x2c30 do_writepages+0x7f/0x1b0 __filemap_fdatawrite_range+0x285/0x3b0 file_write_and_wait_range+0xb1/0x140 ext4_sync_file+0x1aa/0xca0 vfs_fsync_range+0xfb/0x260 do_fsync+0x48/0xa0 [...] ================================================================== Above issue may happen as follows: ------------------------------------- do_fsync vfs_fsync_range ext4_sync_file file_write_and_wait_range __filemap_fdatawrite_range do_writepages ext4_writepages mpage_map_and_submit_extent mpage_map_one_extent ext4_map_blocks ext4_mb_new_blocks ext4_mb_normalize_request >>> start + size <= ac->ac_o_ex.fe_logical ext4_mb_regular_allocator ext4_mb_simple_scan_group ext4_mb_use_best_found ext4_mb_new_preallocation ext4_mb_new_inode_pa ext4_mb_use_inode_pa >>> set ac->ac_b_ex.fe_len <= 0 ext4_mb_mark_diskspace_used >>> BUG_ON(ac->ac_b_ex.fe_len <= 0); we can easily reproduce this problem with the following commands: `fallocate -l100M disk` `mkfs.ext4 -b 1024 -g 256 disk` `mount disk /mnt` `fsstress -d /mnt -l 0 -n 1000 -p 1` The size must be smaller than or equal to EXT4_BLOCKS_PER_GROUP. Therefore, "start + size <= ac->ac_o_ex.fe_logical" may occur when the size is truncated. So start should be the start position of the group where ac_o_ex.fe_logical is located after alignment. In addition, when the value of fe_logical or EXT4_BLOCKS_PER_GROUP is very large, the value calculated by start_off is more accurate.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: fc6c2da174edd7a7b760b12c60d432d300e05cca , < 6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1 (git)
Affected: cd648b8a8fd5071d232242d5ee7ee3c0815776af , < a37c1359714da42517dd19d36fc3c4d17edba832 (git)
Affected: cd648b8a8fd5071d232242d5ee7ee3c0815776af , < 5707d721d1819db57dba57b1d4623034fcb32047 (git)
Affected: cd648b8a8fd5071d232242d5ee7ee3c0815776af , < a6b31616e5afe1d3972cb0682a373e50597faf5c (git)
Affected: cd648b8a8fd5071d232242d5ee7ee3c0815776af , < 6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f (git)
Affected: cd648b8a8fd5071d232242d5ee7ee3c0815776af , < 90f0f9d45dff0128c0fca0d2358c4153b024afa6 (git)
Affected: cd648b8a8fd5071d232242d5ee7ee3c0815776af , < 887a3e9ad4b8309a2266bce7ae749b2bf1f7a687 (git)
Affected: cd648b8a8fd5071d232242d5ee7ee3c0815776af , < a08f789d2ab5242c07e716baf9a835725046be89 (git)
Affected: f213db429b883a2d5403de0b1ce92fb7d7ee979e (git)
Affected: 98f58e05231f835dfb09359e3b5e3a886fe8f189 (git)
Affected: c1664e9bcf6291c0ceb8599f57c8cf493526abe6 (git)
Affected: 37cf4ab1ba60c30ca9fd0fe3b9993b24cb87886a (git)
Affected: 75f37dab088eb84ff25a49e59371f01ea3f44aa7 (git)
Affected: 8774c73cf6963310395823ed7077ea12943ea0f3 (git)
Affected: c4fbdc0124799f1772f4d886b7f2e1a6f881d195 (git)
Affected: 4.9.14 , < 4.9.320 (semver)
Affected: 3.2.89 , < 3.3 (semver)
Affected: 3.10.107 , < 3.11 (semver)
Affected: 3.12.72 , < 3.13 (semver)
Affected: 3.16.44 , < 3.17 (semver)
Affected: 4.1.40 , < 4.2 (semver)
Affected: 4.4.53 , < 4.5 (semver)
Affected: 4.10.2 , < 4.11 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 4.11
Unaffected: 0 , < 4.11 (semver)
Unaffected: 4.9.320 , ≤ 4.9.* (semver)
Unaffected: 4.14.285 , ≤ 4.14.* (semver)
Unaffected: 4.19.249 , ≤ 4.19.* (semver)
Unaffected: 5.4.200 , ≤ 5.4.* (semver)
Unaffected: 5.10.124 , ≤ 5.10.* (semver)
Unaffected: 5.15.49 , ≤ 5.15.* (semver)
Unaffected: 5.18.6 , ≤ 5.18.* (semver)
Unaffected: 5.19 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ext4/mballoc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1",
              "status": "affected",
              "version": "fc6c2da174edd7a7b760b12c60d432d300e05cca",
              "versionType": "git"
            },
            {
              "lessThan": "a37c1359714da42517dd19d36fc3c4d17edba832",
              "status": "affected",
              "version": "cd648b8a8fd5071d232242d5ee7ee3c0815776af",
              "versionType": "git"
            },
            {
              "lessThan": "5707d721d1819db57dba57b1d4623034fcb32047",
              "status": "affected",
              "version": "cd648b8a8fd5071d232242d5ee7ee3c0815776af",
              "versionType": "git"
            },
            {
              "lessThan": "a6b31616e5afe1d3972cb0682a373e50597faf5c",
              "status": "affected",
              "version": "cd648b8a8fd5071d232242d5ee7ee3c0815776af",
              "versionType": "git"
            },
            {
              "lessThan": "6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f",
              "status": "affected",
              "version": "cd648b8a8fd5071d232242d5ee7ee3c0815776af",
              "versionType": "git"
            },
            {
              "lessThan": "90f0f9d45dff0128c0fca0d2358c4153b024afa6",
              "status": "affected",
              "version": "cd648b8a8fd5071d232242d5ee7ee3c0815776af",
              "versionType": "git"
            },
            {
              "lessThan": "887a3e9ad4b8309a2266bce7ae749b2bf1f7a687",
              "status": "affected",
              "version": "cd648b8a8fd5071d232242d5ee7ee3c0815776af",
              "versionType": "git"
            },
            {
              "lessThan": "a08f789d2ab5242c07e716baf9a835725046be89",
              "status": "affected",
              "version": "cd648b8a8fd5071d232242d5ee7ee3c0815776af",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f213db429b883a2d5403de0b1ce92fb7d7ee979e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "98f58e05231f835dfb09359e3b5e3a886fe8f189",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c1664e9bcf6291c0ceb8599f57c8cf493526abe6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "37cf4ab1ba60c30ca9fd0fe3b9993b24cb87886a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "75f37dab088eb84ff25a49e59371f01ea3f44aa7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8774c73cf6963310395823ed7077ea12943ea0f3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c4fbdc0124799f1772f4d886b7f2e1a6f881d195",
              "versionType": "git"
            },
            {
              "lessThan": "4.9.320",
              "status": "affected",
              "version": "4.9.14",
              "versionType": "semver"
            },
            {
              "lessThan": "3.3",
              "status": "affected",
              "version": "3.2.89",
              "versionType": "semver"
            },
            {
              "lessThan": "3.11",
              "status": "affected",
              "version": "3.10.107",
              "versionType": "semver"
            },
            {
              "lessThan": "3.13",
              "status": "affected",
              "version": "3.12.72",
              "versionType": "semver"
            },
            {
              "lessThan": "3.17",
              "status": "affected",
              "version": "3.16.44",
              "versionType": "semver"
            },
            {
              "lessThan": "4.2",
              "status": "affected",
              "version": "4.1.40",
              "versionType": "semver"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.53",
              "versionType": "semver"
            },
            {
              "lessThan": "4.11",
              "status": "affected",
              "version": "4.10.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ext4/mballoc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.11"
            },
            {
              "lessThan": "4.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.9.*",
              "status": "unaffected",
              "version": "4.9.320",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.285",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.249",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.200",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.124",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.49",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.18.*",
              "status": "unaffected",
              "version": "5.18.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "5.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.9.320",
                  "versionStartIncluding": "4.9.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.285",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.249",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.200",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.124",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.49",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.18.6",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.19",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.2.89",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.10.107",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.12.72",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.16.44",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.1.40",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.53",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.10.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix bug_on ext4_mb_use_inode_pa\n\nHulk Robot reported a BUG_ON:\n==================================================================\nkernel BUG at fs/ext4/mballoc.c:3211!\n[...]\nRIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f\n[...]\nCall Trace:\n ext4_mb_new_blocks+0x9df/0x5d30\n ext4_ext_map_blocks+0x1803/0x4d80\n ext4_map_blocks+0x3a4/0x1a10\n ext4_writepages+0x126d/0x2c30\n do_writepages+0x7f/0x1b0\n __filemap_fdatawrite_range+0x285/0x3b0\n file_write_and_wait_range+0xb1/0x140\n ext4_sync_file+0x1aa/0xca0\n vfs_fsync_range+0xfb/0x260\n do_fsync+0x48/0xa0\n[...]\n==================================================================\n\nAbove issue may happen as follows:\n-------------------------------------\ndo_fsync\n vfs_fsync_range\n  ext4_sync_file\n   file_write_and_wait_range\n    __filemap_fdatawrite_range\n     do_writepages\n      ext4_writepages\n       mpage_map_and_submit_extent\n        mpage_map_one_extent\n         ext4_map_blocks\n          ext4_mb_new_blocks\n           ext4_mb_normalize_request\n            \u003e\u003e\u003e start + size \u003c= ac-\u003eac_o_ex.fe_logical\n           ext4_mb_regular_allocator\n            ext4_mb_simple_scan_group\n             ext4_mb_use_best_found\n              ext4_mb_new_preallocation\n               ext4_mb_new_inode_pa\n                ext4_mb_use_inode_pa\n                 \u003e\u003e\u003e set ac-\u003eac_b_ex.fe_len \u003c= 0\n           ext4_mb_mark_diskspace_used\n            \u003e\u003e\u003e BUG_ON(ac-\u003eac_b_ex.fe_len \u003c= 0);\n\nwe can easily reproduce this problem with the following commands:\n\t`fallocate -l100M disk`\n\t`mkfs.ext4 -b 1024 -g 256 disk`\n\t`mount disk /mnt`\n\t`fsstress -d /mnt -l 0 -n 1000 -p 1`\n\nThe size must be smaller than or equal to EXT4_BLOCKS_PER_GROUP.\nTherefore, \"start + size \u003c= ac-\u003eac_o_ex.fe_logical\" may occur\nwhen the size is truncated. So start should be the start position of\nthe group where ac_o_ex.fe_logical is located after alignment.\nIn addition, when the value of fe_logical or EXT4_BLOCKS_PER_GROUP\nis very large, the value calculated by start_off is more accurate."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:22:46.811Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1"
        },
        {
          "url": "https://git.kernel.org/stable/c/a37c1359714da42517dd19d36fc3c4d17edba832"
        },
        {
          "url": "https://git.kernel.org/stable/c/5707d721d1819db57dba57b1d4623034fcb32047"
        },
        {
          "url": "https://git.kernel.org/stable/c/a6b31616e5afe1d3972cb0682a373e50597faf5c"
        },
        {
          "url": "https://git.kernel.org/stable/c/6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f"
        },
        {
          "url": "https://git.kernel.org/stable/c/90f0f9d45dff0128c0fca0d2358c4153b024afa6"
        },
        {
          "url": "https://git.kernel.org/stable/c/887a3e9ad4b8309a2266bce7ae749b2bf1f7a687"
        },
        {
          "url": "https://git.kernel.org/stable/c/a08f789d2ab5242c07e716baf9a835725046be89"
        }
      ],
      "title": "ext4: fix bug_on ext4_mb_use_inode_pa",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-49708",
    "datePublished": "2025-02-26T02:24:26.142Z",
    "dateReserved": "2025-02-26T02:21:30.444Z",
    "dateUpdated": "2026-05-23T15:22:46.811Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-49708",
      "date": "2026-09-16",
      "epss": "0.00284",
      "percentile": "0.21007"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-49708\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-02-26T07:01:46.607\",\"lastModified\":\"2026-06-17T05:18:55.683\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\next4: fix bug_on ext4_mb_use_inode_pa\\n\\nHulk Robot reported a BUG_ON:\\n==================================================================\\nkernel BUG at fs/ext4/mballoc.c:3211!\\n[...]\\nRIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f\\n[...]\\nCall Trace:\\n ext4_mb_new_blocks+0x9df/0x5d30\\n ext4_ext_map_blocks+0x1803/0x4d80\\n ext4_map_blocks+0x3a4/0x1a10\\n ext4_writepages+0x126d/0x2c30\\n do_writepages+0x7f/0x1b0\\n __filemap_fdatawrite_range+0x285/0x3b0\\n file_write_and_wait_range+0xb1/0x140\\n ext4_sync_file+0x1aa/0xca0\\n vfs_fsync_range+0xfb/0x260\\n do_fsync+0x48/0xa0\\n[...]\\n==================================================================\\n\\nAbove issue may happen as follows:\\n-------------------------------------\\ndo_fsync\\n vfs_fsync_range\\n  ext4_sync_file\\n   file_write_and_wait_range\\n    __filemap_fdatawrite_range\\n     do_writepages\\n      ext4_writepages\\n       mpage_map_and_submit_extent\\n        mpage_map_one_extent\\n         ext4_map_blocks\\n          ext4_mb_new_blocks\\n           ext4_mb_normalize_request\\n            \u003e\u003e\u003e start + size \u003c= ac-\u003eac_o_ex.fe_logical\\n           ext4_mb_regular_allocator\\n            ext4_mb_simple_scan_group\\n             ext4_mb_use_best_found\\n              ext4_mb_new_preallocation\\n               ext4_mb_new_inode_pa\\n                ext4_mb_use_inode_pa\\n                 \u003e\u003e\u003e set ac-\u003eac_b_ex.fe_len \u003c= 0\\n           ext4_mb_mark_diskspace_used\\n            \u003e\u003e\u003e BUG_ON(ac-\u003eac_b_ex.fe_len \u003c= 0);\\n\\nwe can easily reproduce this problem with the following commands:\\n\\t`fallocate -l100M disk`\\n\\t`mkfs.ext4 -b 1024 -g 256 disk`\\n\\t`mount disk /mnt`\\n\\t`fsstress -d /mnt -l 0 -n 1000 -p 1`\\n\\nThe size must be smaller than or equal to EXT4_BLOCKS_PER_GROUP.\\nTherefore, \\\"start + size \u003c= ac-\u003eac_o_ex.fe_logical\\\" may occur\\nwhen the size is truncated. So start should be the start position of\\nthe group where ac_o_ex.fe_logical is located after alignment.\\nIn addition, when the value of fe_logical or EXT4_BLOCKS_PER_GROUP\\nis very large, the value calculated by start_off is more accurate.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: correcci\u00f3n de bug_on ext4_mb_use_inode_pa Hulk Robot inform\u00f3 de un BUG_ON: ================================================================== kernel BUG at fs/ext4/mballoc.c:3211! [...] RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f [...] Call Trace: ext4_mb_new_blocks+0x9df/0x5d30 ext4_ext_map_blocks+0x1803/0x4d80 ext4_map_blocks+0x3a4/0x1a10 ext4_writepages+0x126d/0x2c30 do_writepages+0x7f/0x1b0 __filemap_fdatawrite_range+0x285/0x3b0 file_write_and_wait_range+0xb1/0x140 ext4_sync_file+0x1aa/0xca0 vfs_fsync_range+0xfb/0x260 do_fsync+0x48/0xa0 [...] ================================================================== El problema anterior puede ocurrir de la siguiente manera: ------------------------------------- do_fsync vfs_fsync_range ext4_sync_file file_write_and_wait_range __filemap_fdatawrite_range do_writepages ext4_writepages mpage_map_and_submit_extent mpage_map_one_extent ext4_map_blocks ext4_mb_new_blocks ext4_mb_normalize_request \u0026gt;\u0026gt;\u0026gt; start + size \u0026lt;= ac-\u0026gt;ac_o_ex.fe_logical ext4_mb_regular_allocator ext4_mb_simple_scan_group ext4_mb_use_best_found ext4_mb_new_preallocation ext4_mb_new_inode_pa ext4_mb_use_inode_pa \u0026gt;\u0026gt;\u0026gt; set ac-\u0026gt;ac_b_ex.fe_len \u0026lt;= 0 ext4_mb_mark_diskspace_used \u0026gt;\u0026gt;\u0026gt; BUG_ON(ac-\u0026gt;ac_b_ex.fe_len \u0026lt;= 0); podemos reproducir f\u00e1cilmente este problema con los siguientes comandos: `fallocate -l100M disk` `mkfs.ext4 -b 1024 -g 256 disk` `mount disk /mnt` `fsstress -d /mnt -l 0 -n 1000 -p 1` El tama\u00f1o debe ser menor o igual que EXT4_BLOCKS_PER_GROUP. Por lo tanto, puede aparecer \\\"start + size \u0026lt;= ac-\u0026gt;ac_o_ex.fe_logical\\\" cuando se trunca el tama\u00f1o. Por lo tanto, start debe ser la posici\u00f3n de inicio del grupo donde se encuentra ac_o_ex.fe_logical despu\u00e9s de la alineaci\u00f3n. Adem\u00e1s, cuando el valor de fe_logical o EXT4_BLOCKS_PER_GROUP es muy grande, el valor calculado por start_off es m\u00e1s preciso.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/ext4/mballoc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"fc6c2da174edd7a7b760b12c60d432d300e05cca\",\"lessThan\":\"6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cd648b8a8fd5071d232242d5ee7ee3c0815776af\",\"lessThan\":\"a37c1359714da42517dd19d36fc3c4d17edba832\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cd648b8a8fd5071d232242d5ee7ee3c0815776af\",\"lessThan\":\"5707d721d1819db57dba57b1d4623034fcb32047\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cd648b8a8fd5071d232242d5ee7ee3c0815776af\",\"lessThan\":\"a6b31616e5afe1d3972cb0682a373e50597faf5c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cd648b8a8fd5071d232242d5ee7ee3c0815776af\",\"lessThan\":\"6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cd648b8a8fd5071d232242d5ee7ee3c0815776af\",\"lessThan\":\"90f0f9d45dff0128c0fca0d2358c4153b024afa6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cd648b8a8fd5071d232242d5ee7ee3c0815776af\",\"lessThan\":\"887a3e9ad4b8309a2266bce7ae749b2bf1f7a687\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cd648b8a8fd5071d232242d5ee7ee3c0815776af\",\"lessThan\":\"a08f789d2ab5242c07e716baf9a835725046be89\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f213db429b883a2d5403de0b1ce92fb7d7ee979e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"98f58e05231f835dfb09359e3b5e3a886fe8f189\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c1664e9bcf6291c0ceb8599f57c8cf493526abe6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"37cf4ab1ba60c30ca9fd0fe3b9993b24cb87886a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"75f37dab088eb84ff25a49e59371f01ea3f44aa7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"8774c73cf6963310395823ed7077ea12943ea0f3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c4fbdc0124799f1772f4d886b7f2e1a6f881d195\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4.9.14\",\"lessThan\":\"4.9.320\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.2.89\",\"lessThan\":\"3.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.10.107\",\"lessThan\":\"3.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.12.72\",\"lessThan\":\"3.13\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.16.44\",\"lessThan\":\"3.17\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.1.40\",\"lessThan\":\"4.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.4.53\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.10.2\",\"lessThan\":\"4.11\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/ext4/mballoc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.11\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.11\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.9.320\",\"lessThanOrEqual\":\"4.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.285\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.249\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.200\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.124\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.49\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.18.6\",\"lessThanOrEqual\":\"5.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.19\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-617\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.2.89\",\"versionEndExcluding\":\"3.3\",\"matchCriteriaId\":\"62DA6B02-03A2-4BF6-B720-FF7688D0A6B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.10.107\",\"versionEndExcluding\":\"3.11\",\"matchCriteriaId\":\"76F03B46-D851-4BA1-BC94-1AA30AF8A93A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.12.72\",\"versionEndExcluding\":\"3.13\",\"matchCriteriaId\":\"81CC1290-60AE-4CA1-9004-33F526A126CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.16.44\",\"versionEndExcluding\":\"3.17\",\"matchCriteriaId\":\"9AC8E500-E50C-4CE7-BBB5-1AD2CEA1A297\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.1.40\",\"versionEndExcluding\":\"4.2\",\"matchCriteriaId\":\"C80CE5E2-CA96-47D4-9D8C-220E0BD14249\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.4.53\",\"versionEndExcluding\":\"4.5\",\"matchCriteriaId\":\"5AB7644C-B4B9-4495-AD26-3659130E9E74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.9.14\",\"versionEndExcluding\":\"4.9.320\",\"matchCriteriaId\":\"A7B11069-C394-4A5B-95FB-528C6F703405\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.10.2\",\"versionEndExcluding\":\"4.14.285\",\"matchCriteriaId\":\"233A43F4-DE2A-465E-88B0-7DCA43A9FE44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.249\",\"matchCriteriaId\":\"8A08E48B-CA77-4A21-9558-17D61C146BE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.200\",\"matchCriteriaId\":\"80B2AE57-4A7E-40BB-8C83-33D4436CE199\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.124\",\"matchCriteriaId\":\"6442F2CD-FF1C-4574-9948-138835E635D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.49\",\"matchCriteriaId\":\"697D250E-E0A4-41BE-BB54-96385E129206\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"5.18.6\",\"matchCriteriaId\":\"CDD33A19-B51E-4090-A47B-073098916815\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.19:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8C30C2D-F82D-4D37-AB48-D76ABFBD5377\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.19:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"BF8547FC-C849-4F1B-804B-A93AE2F04A92\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/5707d721d1819db57dba57b1d4623034fcb32047\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6880fb2e64331b9fdc85d3f32b1d7e81ad8703f1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6fdaf31ad5f3d3afab744dfd9a8b0d9142aa881f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/887a3e9ad4b8309a2266bce7ae749b2bf1f7a687\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/90f0f9d45dff0128c0fca0d2358c4153b024afa6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a08f789d2ab5242c07e716baf9a835725046be89\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a37c1359714da42517dd19d36fc3c4d17edba832\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a6b31616e5afe1d3972cb0682a373e50597faf5c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-29T21:16:00+00:00",
      "cve": "CVE-2022-49708",
      "id": "CVE-2022-49708",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:fixed": "286",
      "product_status:known_affected": "80",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ext4: fix bug_on ext4_mb_use_inode_pa",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-49708.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T16:53:34Z",
      "cve": "CVE-2022-49708",
      "id": "CVE-2022-49708",
      "initial_release_date": "2025-02-27T03:02:28Z",
      "product_status:known_affected": "455",
      "product_status:known_not_affected": "196",
      "product_status:recommended": "387",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2022-49708",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2022-49708.json",
      "version": "61"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.