CVE-2022-50485

ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode

published October 4, 2025

CVSS
—
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode

There are many places that will get unhappy (and crash) when ext4_iget()

returns a bad inode. However, if iget the boot loader inode, allows a bad

inode to be returned, because the inode may not be initialized. This

mechanism can be used to bypass some checks and cause panic. To solve this

problem, we add a special iget flag EXT4_IGET_BAD. Only with this flag

we'd be returning bad inode from ext4_iget(), otherwise we always return

the error code if the inode is bad inode.(suggested by Jan Kara)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00169 · 6.0th percentile
Published
2025-10-04T15:16Z
EPSS history
Timeline
  • 04 OCT 15:16Z
    ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
    cvelistv5