CVE-2022-0850

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in linux kernel, where an information leak occurs via ext4_extent_header to userspace.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	kernel	Fixed in kernel v5.14 rc1

References

https://access.redhat.com/security/cve/CVE-2022-0850Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2060606Exploit, Issue Tracking, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce3aba43599f0b50adbebff133df8d08a3d5fffeMailing List, Patch, Vendor Advisory
https://syzkaller.appspot.com/bug?id=78e9ad0e6952a3ca16e8234724b2fa92d041b9b8Exploit, Mailing List, Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-0850Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2060606Exploit, Issue Tracking, Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce3aba43599f0b50adbebff133df8d08a3d5fffeMailing List, Patch, Vendor Advisory
https://syzkaller.appspot.com/bug?id=78e9ad0e6952a3ca16e8234724b2fa92d041b9b8Exploit, Mailing List, Third Party Advisory

Timeline

Published: Aug 29, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-08515.5There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to sub CVE-2022-08525.5There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could CVE-2022-08537.5A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeate CVE-2022-08545.5A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to CVE-2022-08556.1Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.CVE-2022-08566.5libcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user to cause a Denial of Service CVE-2022-08576.1A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote CVE-2022-08584.7A cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker CVE-2022-08596.7McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL serv CVE-2022-08609.1Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.CVE-2022-08613.8A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator at CVE-2022-08625.3A lack of password change protection vulnerability in a depreciated API of McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update