Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2022-50270

7.1 · HIGH

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix the assign logic of iocb commit 18ae8d12991b ("f2fs: show more DIO information in tracepoint") introduces iocb field…

Published Sep 15, 2025EPSS 0.16%

Overview

CVE-2022-50270 is a high-severity vulnerability. It was published on September 15, 2025 and has a CVSS 3.1 base score of 7.1 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.1, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix the assign logic of iocb

commit 18ae8d12991b ("f2fs: show more DIO information in tracepoint")

introduces iocb field in 'f2fs_direct_IO_enter' trace event

And it only assigns the pointer and later it accesses its field

in trace print log.

Unable to handle kernel paging request at virtual address ffffffc04cef3d30

Mem abort info:

ESR = 0x96000007

EC = 0x25: DABT (current EL), IL = 32 bits

pc : trace_raw_output_f2fs_direct_IO_enter+0x54/0xa4

lr : trace_raw_output_f2fs_direct_IO_enter+0x2c/0xa4

sp : ffffffc0443cbbd0

x29: ffffffc0443cbbf0 x28: ffffff8935b120d0 x27: ffffff8935b12108

x26: ffffff8935b120f0 x25: ffffff8935b12100 x24: ffffff8935b110c0

x23: ffffff8935b10000 x22: ffffff88859a936c x21: ffffff88859a936c

x20: ffffff8935b110c0 x19: ffffff8935b10000 x18: ffffffc03b195060

x17: ffffff8935b11e76 x16: 00000000000000cc x15: ffffffef855c4f2c

x14: 0000000000000001 x13: 000000000000004e x12: ffff0000ffff

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/0db18eec0d9a7ee525209e31e3ac2f673545b12fRefgit.kernel.org/stable/c/b4244ca341ea95c52ee8fa93d04f5af3e584dd37Refgit.kernel.org/stable/c/d555aa37566c5c3728f2e52047a9722eae2aed93

How CyberStrike helps

Frequently asked questions

What is CVE-2022-50270?

CVE-2022-50270 is a high-severity vulnerability. It was published on September 15, 2025 and has a CVSS 3.1 base score of 7.1 (HIGH).

How severe is CVE-2022-50270?

This vulnerability has a CVSS 3.1 base score of 7.1, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2022-50270?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2022-50270?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2022-50270 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related HIGH CVEs from 2022

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999