CVE-2022-50436

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: don't set up encryption key during jbd2 transaction

Commit a80f7fcf1867 ("ext4: fixup ext4_fc_track_* functions' signature") extended the scope of the transaction in ext4_unlink() too far, making it include the call to ext4_find_entry(). However, ext4_find_entry() can deadlock when called from within a transaction because it may need to set up the directory's encryption key.

Fix this by restoring the transaction to its original scope.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= a80f7fcf18672ae4971a6b713b58c0d389aa99fe, < 23ad034760dd38e12b0e0e1b28b9629f330810a1; >= a80f7fcf18672ae4971a6b713b58c0d389aa99fe, < 6220ec405571ded17efedc56587190b542adf246; >= a80f7fcf18672ae4971a6b713b58c0d389aa99fe, < 206dd3acfb9bca54a25b228c7c7c2257eedde09b; >= a80f7fcf18672ae4971a6b713b58c0d389aa99fe, < 1ba993208bcfd691e241483420a2a761d3f15750; >= a80f7fcf18672ae4971a6b713b58c0d389aa99fe, < 4c0d5778385cb3618ff26a561ce41de2b7d9de70
LinuxLinux5.10

References

Timeline

Published
Oct 1, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-504377.8In the Linux kernel, the following vulnerability has been resolved: drm/msm/hdmi: fix memory corruption with too many bridges Add the missCVE-2022-504385.5In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the inputCVE-2022-504395.5In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8173: Enable IRQ when pdata is ready If the device dCVE-2022-504405.5In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate the box size for the snooped cursor Invalid usersCVE-2022-504415.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Lag, fix failure to cancel delayed bond work Commit 0d4e8ed1CVE-2022-504427.1In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate buffer length while parsing index indx_read is callCVE-2022-504435.5In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: lvds: fix PM usage counter unbalance in poweron pm_runtiCVE-2022-504445.5In the Linux kernel, the following vulnerability has been resolved: clk: tegra20: Fix refcount leak in tegra20_clock_init of_find_matchingCVE-2022-504455.5In the Linux kernel, the following vulnerability has been resolved: xfrm: Reinject transport-mode packets through workqueue The following CVE-2022-504465.5In the Linux kernel, the following vulnerability has been resolved: ARC: mm: fix leakage of memory allocated for PTE Since commit d9820ff CVE-2022-504475.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix crash on hci_create_cis_sync When attempting CVE-2022-504485.5In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in When PTE_M
CVE-2022-50436: Medium severity, CVSS 5.5 | Vulnix