CVE-2022-50436

ext4: don't set up encryption key during jbd2 transaction

published October 1, 2025

CVSS
—
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ext4: don't set up encryption key during jbd2 transaction

Commit a80f7fcf1867 ("ext4: fixup ext4_fc_track_* functions' signature")

extended the scope of the transaction in ext4_unlink() too far, making

it include the call to ext4_find_entry(). However, ext4_find_entry()

can deadlock when called from within a transaction because it may need

to set up the directory's encryption key.

Fix this by restoring the transaction to its original scope.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00101 · 0.9th percentile
Published
2025-10-01T11:42Z
EPSS history
Timeline
  • 01 OCT 11:42Z
    ext4: don't set up encryption key during jbd2 transaction
    cvelistv5