CVE-2022-48712

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix error handling in ext4_fc_record_modified_inode()

Current code does not fully takes care of krealloc() error case, which could lead to silent memory corruption or a kernel bug. This patch fixes that.

Also it cleans up some duplicated error handling logic from various functions in fast_commit.c file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2, < 62e46e0ffc02daa8fcfc02f7a932cc8a19601b19; >= 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2, < 1b6762ecdf3cf12113772427c904aa3c420a1802; >= 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2, < 14aa3f49c7fc6424763f4323bfbc3a807b0727dc; >= 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2, < cdce59a1549190b66f8e3fe465c2b2f714b98a94
LinuxLinux5.10

References

Timeline

Published
Jun 20, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-487135.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode AdCVE-2022-487147.1In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0beCVE-2022-487155.5In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe Running tests with a deCVE-2022-487167.8In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of portid Mixer controls havCVE-2022-487177.8In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for nCVE-2022-487185.5In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereferCVE-2022-487195.5In the Linux kernel, the following vulnerability has been resolved: net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_maCVE-2022-48724.3The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ensure that the option CVE-2022-487205.5In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEV_UNREGISTER event Current mCVE-2022-487215.5In the Linux kernel, the following vulnerability has been resolved: net/smc: Forward wakeup to smc socket waitqueue after fallback When weCVE-2022-487225.5In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_CVE-2022-487235.5In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The is
CVE-2022-48712: High severity, CVSS 7.8 | Vulnix