CVE-2022-50835: jbd2: add miss release buffer head in fc_do_one_pass()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: jbd2: add miss release buffer head in fc_do_one_pass() In fc_do_one_pass() miss release buffer head after use which will lead to reference count leak.

Affected products

Linux kernel: 5.10 — fixed in 6.1

How to fix

Upgrade to a fixed version: Linux kernel 6.1. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/1f48116cbd3404898c9022892e114dd7cc3063c1
https://git.kernel.org/stable/c/27c7bd35135d5ab38b9138ecf186ce54a96c98d9
https://git.kernel.org/stable/c/56fcd0788f0d9243c1754bd6f80b8b327c4afeee
https://git.kernel.org/stable/c/dfff66f30f66b9524b661f311bbed8ff3d2ca49f
https://git.kernel.org/stable/c/e65506ff181fc176088f32117d69b9cb1ddda777

Get alerted when CVE-2022-50835 or the next vulnerability affects your stack