CVE-2022-50286

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline

When converting files with inline data to extents, delayed allocations

made on a file system created with both the bigalloc and inline options

can result in invalid extent status cache content, incorrect reserved

cluster counts, kernel memory leaks, and potential kernel panics.

With bigalloc, the code that determines whether a block must be

delayed allocated searches the extent tree to see if that block maps

to a previously allocated cluster. If not, the block is delayed

allocated, and otherwise, it isn't. However, if the inline option is

also used, and if the file containing the block is marked as able to

store data inline, there isn't a valid extent tree associated with

the file. The current code in ext4_clu_mapped() calls

ext4_find_extent() to search the non-existent tree for a previously

allocated cluster anyway, which typically finds n

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References