What’s Vulnerable › Vulnerabilities

CVE-2022-48712: ext4: fix error handling in ext4_fc_record_modified_inode()

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-20 · updated 2026-06-17
• Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4_fc_record_modified_inode() Current code does not fully takes care of krealloc() error case, which could lead to silent memory corruption or a kernel bug. This patch fixes that. Also it cleans up some duplicated error handling logic from various functions in fast_commit.c file.

Affected products

• Linux kernel: before 5.10.99; from 5.11 before 5.15.22; from 5.16 before 5.16.8; 5.17-rc1, 5.17-rc2 — fixed in 5.10.99, 5.15.22, 5.16.8

How to fix

Upgrade to a fixed version: Linux kernel 5.10.99, 5.15.22, 5.16.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/14aa3f49c7fc6424763f4323bfbc3a807b0727dc
• https://git.kernel.org/stable/c/1b6762ecdf3cf12113772427c904aa3c420a1802
• https://git.kernel.org/stable/c/62e46e0ffc02daa8fcfc02f7a932cc8a19601b19
• https://git.kernel.org/stable/c/cdce59a1549190b66f8e3fe465c2b2f714b98a94
• https://git.kernel.org/stable/c/14aa3f49c7fc6424763f4323bfbc3a807b0727dc
• https://git.kernel.org/stable/c/1b6762ecdf3cf12113772427c904aa3c420a1802
• https://git.kernel.org/stable/c/62e46e0ffc02daa8fcfc02f7a932cc8a19601b19
• https://git.kernel.org/stable/c/cdce59a1549190b66f8e3fe465c2b2f714b98a94

Get alerted when CVE-2022-48712 or the next vulnerability affects your stack