CVE-2022-50300CWE-416

CVE-2022-50300

High · published September 15, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix extent map use-after-free when handling missing device in read_one_chunk

Store the error code before freeing the extent_map. Though it's

reference counted structure, in that function it's the first and last

allocation so this would lead to a potential use-after-free.

The error can happen eg. when chunk is stored on a missing device and

the degraded mount option is missing.

Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=216721

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.6th percentile
Weakness
CWE-416 · Use After Free
Published
2025-09-15T19:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 4.15, < 5.15.875.15.87
linux/linux_kernel≥ 5.16, < 6.0.186.0.18
linux/linux_kernel≥ 6.1, < 6.1.46.1.4
References (4)
EPSS history
Timeline
  • 15 SEP 14:45Z
    btrfs: fix extent map use-after-free when handling missing device in read_one_chunk
    cvelistv5