Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CVE-2022-48631: Linux kernel ext4 can cause system crash
CVE-2022-48631 · published 2 years ago
Summary
The Linux kernel versions used in Canonical Linux, Linux‑AWS, Linux‑Azure, Linux‑LTS‑Xenial, and Linux‑AWS‑HWE may crash when the ext4 file system processes certain file metadata. This happens because the code does not check for an empty entry list in a deeper file‑structure level, leading to an invalid operation that stops the system. Update to the latest kernel release where this code has been corrected to prevent the crash.
What to do
- Update canonical linux-aws-5.4 to version 5.4.0-1093.102~18.04.2.
- Update canonical linux-azure-5.4 to version 5.4.0-1100.106~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1097.106~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-136.153~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1041.46~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1091.100~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1078.89~18.04.1.
- Update canonical linux to version 5.4.0-136.153.
- Update canonical linux-aws to version 5.4.0-1093.101.
- Update canonical linux-aws-5.15 to version 5.15.0-1027.31~20.04.1.
- Update canonical linux-azure to version 5.4.0-1100.106.
- Update canonical linux-azure-5.15 to version 5.15.0-1030.37~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1054.60.
- Update canonical linux-gcp to version 5.4.0-1097.106.
- Update canonical linux-gcp-5.15 to version 5.15.0-1027.34~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1061.65.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1012.16~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-57.63~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1041.46.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1023.28~20.04.1.
- Update canonical linux-iot to version 5.4.0-1010.12.
- Update canonical linux-kvm to version 5.4.0-1083.89.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-58.64~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1091.100.
- Update canonical linux-oracle-5.15 to version 5.15.0-1027.33~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1078.89.
- Update canonical linux-riscv-5.15 to version 5.15.0-1027.31~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1093.101+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1100.106+fips1.
- Update canonical linux-fips to version 5.4.0-1069.78.
- Update canonical linux-gcp-fips to version 5.4.0-1097.106+fips1.
- Update canonical linux to version 5.15.0-57.63.
- Update canonical linux-aws to version 5.15.0-1027.31.
- Update canonical linux-azure to version 5.15.0-1030.37.
- Update canonical linux-azure-fde to version 5.15.0-1030.37.1.
- Update canonical linux-gcp to version 5.15.0-1026.33.
- Update canonical linux-gke to version 5.15.0-1024.29.
- Update canonical linux-gkeop to version 5.15.0-1012.16.
- Update canonical linux-ibm to version 5.15.0-1022.25.
- Update canonical linux-intel-iotg to version 5.15.0-1023.28.
- Update canonical linux-kvm to version 5.15.0-1025.30.
- Update canonical linux-lowlatency to version 5.15.0-57.63.
- Update canonical linux-nvidia to version 5.15.0-1015.15.
- Update canonical linux-oracle to version 5.15.0-1026.32.
- Update canonical linux-raspi to version 5.15.0-1022.24.
- Update canonical linux-realtime to version 5.15.0-1029.32.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1114.123~20.04.1.
- Update debian linux to version 6.0.2-1.
- Update linux kernel to version 5.19.12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1093.102~18.04.2 Fix: upgrade to 5.4.0-1093.102~18.04.2
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1100.106~18.04.1 Fix: upgrade to 5.4.0-1100.106~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1097.106~18.04.1 Fix: upgrade to 5.4.0-1097.106~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-136.153~18.04.1 Fix: upgrade to 5.4.0-136.153~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1041.46~18.04.1 Fix: upgrade to 5.4.0-1041.46~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1091.100~18.04.1 Fix: upgrade to 5.4.0-1091.100~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1078.89~18.04.1 Fix: upgrade to 5.4.0-1078.89~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
Showing 50 of 148. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-136.153 Fix: upgrade to 5.4.0-136.153
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1093.101 Fix: upgrade to 5.4.0-1093.101
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1027.31~20.04.1 Fix: upgrade to 5.15.0-1027.31~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1100.106 Fix: upgrade to 5.4.0-1100.106
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1030.37~20.04.1 Fix: upgrade to 5.15.0-1030.37~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1054.60 Fix: upgrade to 5.4.0-1054.60
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1097.106 Fix: upgrade to 5.4.0-1097.106
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1027.34~20.04.1 Fix: upgrade to 5.15.0-1027.34~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1061.65 Fix: upgrade to 5.4.0-1061.65
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1012.16~20.04.1 Fix: upgrade to 5.15.0-1012.16~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-57.63~20.04.1 Fix: upgrade to 5.15.0-57.63~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1041.46 Fix: upgrade to 5.4.0-1041.46
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1023.28~20.04.1 Fix: upgrade to 5.15.0-1023.28~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1010.12 Fix: upgrade to 5.4.0-1010.12
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1083.89 Fix: upgrade to 5.4.0-1083.89
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-58.64~20.04.1 Fix: upgrade to 5.15.0-58.64~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1091.100 Fix: upgrade to 5.4.0-1091.100
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1027.33~20.04.1 Fix: upgrade to 5.15.0-1027.33~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1078.89 Fix: upgrade to 5.4.0-1078.89
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1027.31~20.04.1 Fix: upgrade to 5.15.0-1027.31~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1114.123~20.04.1 Fix: upgrade to 5.15.0-1114.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1093.101+fips1 Fix: upgrade to 5.4.0-1093.101+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1100.106+fips1 Fix: upgrade to 5.4.0-1100.106+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1069.78 Fix: upgrade to 5.4.0-1069.78
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1097.106+fips1 Fix: upgrade to 5.4.0-1097.106+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-57.63 Fix: upgrade to 5.15.0-57.63
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1030.37 Fix: upgrade to 5.15.0-1030.37
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1030.37.1 Fix: upgrade to 5.15.0-1030.37.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1026.33 Fix: upgrade to 5.15.0-1026.33
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1024.29 Fix: upgrade to 5.15.0-1024.29
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1012.16 Fix: upgrade to 5.15.0-1012.16
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1022.25 Fix: upgrade to 5.15.0-1022.25
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1023.28 Fix: upgrade to 5.15.0-1023.28
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1025.30 Fix: upgrade to 5.15.0-1025.30
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-57.63 Fix: upgrade to 5.15.0-57.63
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1015.15 Fix: upgrade to 5.15.0-1015.15
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1026.32 Fix: upgrade to 5.15.0-1026.32
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1022.24 Fix: upgrade to 5.15.0-1022.24
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1029.32 Fix: upgrade to 5.15.0-1029.32
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| – | linux | linux_kernel |
< 5.4.215 >= 5.5, < 5.10.146 >= 5.11, < 5.15.71 >= 5.16, < 5.19.12 6.0 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:12 | debian | linux |
< 6.0.2-1 Fix: upgrade to 6.0.2-1
|
| Linux | linux | kernel |
>= 5.16.0, < 5.19.12 Fix: upgrade to 5.19.12
|
Original advisory text
ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 When walking through an inode extents, the ext4_ext_binsearch_idx() function assumes that the extent header has been previously validated. However, there are no checks that verify that the number of entries (eh->eh_entries) is non-zero when depth is > 0. And this will lead to problems because the EXT_FIRST_INDEX() and EXT_LAST_INDEX() will return garbage and result in this: [ 135.245946] ------------[ cut here ]------------ [ 135.247579] kernel BUG at fs/ext4/extents.c:2258! [ 135.249045] invalid opcode: 0000 [#1] PREEMPT SMP [ 135.250320] CPU: 2 PID: 238 Comm: tmp118 Not tainted 5.19.0-rc8+ #4 [ 135.252067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.15.0-0-g2dd4b9b-rebuilt.opensuse.org 04/01/2014 [ 135.255065] RIP: 0010:ext4_ext_map_blocks+0xc20/0xcb0 [ 135.256475] Code: [ 135.261433] RSP: 0018:ffffc900005939f8 EFLAGS: 00010246 [ 135.262847] RAX: 0000000000000024 RBX: ffffc90000593b70 RCX: 0000000000000023 [ 135.264765] RDX: ffff8880038e5f10 RSI: 0000000000000003 RDI: ffff8880046e922c [ 135.266670] RBP: ffff8880046e9348 R08: 0000000000000001 R09: ffff888002ca580c [ 135.268576] R10: 0000000000002602 R11: 0000000000000000 R12: 0000000000000024 [ 135.270477] R13: 0000000000000000 R14: 0000000000000024 R15: 0000000000000000 [ 135.272394] FS: 00007fdabdc56740(0000) GS:ffff88807dd00000(0000) knlGS:0000000000000000 [ 135.274510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.276075] CR2: 00007ffc26bd4f00 CR3: 0000000006261004 CR4: 0000000000170ea0 [ 135.277952] Call Trace: [ 135.278635] <TASK> [ 135.279247] ? preempt_count_add+0x6d/0xa0 [ 135.280358] ? percpu_counter_add_batch+0x55/0xb0 [ 135.281612] ? _raw_read_unlock+0x18/0x30 [ 135.282704] ext4_map_blocks+0x294/0x5a0 [ 135.283745] ? xa_load+0x6f/0xa0 [ 135.284562] ext4_mpage_readpages+0x3d6/0x770 [ 135.285646] read_pages+0x67/0x1d0 [ 135.286492] ? folio_add_lru+0x51/0x80 [ 135.287441] page_cache_ra_unbounded+0x124/0x170 [ 135.288510] filemap_get_pages+0x23d/0x5a0 [ 135.289457] ? path_openat+0xa72/0xdd0 [ 135.290332] filemap_read+0xbf/0x300 [ 135.291158] ? _raw_spin_lock_irqsave+0x17/0x40 [ 135.292192] new_sync_read+0x103/0x170 [ 135.293014] vfs_read+0x15d/0x180 [ 135.293745] ksys_read+0xa1/0xe0 [ 135.294461] do_syscall_64+0x3c/0x80 [ 135.295284] entry_SYSCALL_64_after_hwframe+0x46/0xb0 This patch simply adds an extra check in __ext4_ext_check(), verifying that eh_entries is not 0 when eh_depth is > 0.
References
- https://ubuntu.com/security/CVE-2022-48631 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2022-48631 Third Party Advisory
- https://git.kernel.org/linus/29a5b8a137ac8eb410cc823653a29ac0e7b7e1b0 Third Party Advisory
- https://git.kernel.org/stable/c/bb7eb3ca4b3b0d2c7872cf1a41c30f5e5bd65df0 Third Party Advisory
- https://git.kernel.org/stable/c/958b0ee23f5ac106e7cc11472b71aa2ea9a033bc Third Party Advisory
- https://git.kernel.org/stable/c/be4df018c0be5ebecf1ca510feacc23be415cefc Third Party Advisory
- https://git.kernel.org/stable/c/2f5e9de15e4f55fbf56f22d4a2ce406246cc462d Third Party Advisory
- https://git.kernel.org/stable/c/29a5b8a137ac8eb410cc823653a29ac0e7b7e1b0 Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48631... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-48631 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://security-tracker.debian.org/tracker/CVE-2022-48631 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
8.3
High
Timeline
Published28 Apr 2024
Updated4 Nov 2026
First seen7 Apr 2026
Sources
UBUNTU-CVE-2022-48631 · OSV
CVE-2022-48631 · NVD
DEBIAN-CVE-2022-48631 · OSV
CVE-2022-48631 · OSV
Track software like this
Free during beta