In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration attempting to grow the fs by a negative amount, which trips a BUG_ON and leaves the fs with a corrupted in-memory superblock.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-284.11.1.el9_2 cpe:/a:redhat:enterprise_linux:9 RHSA-2023:2458 2023-05-09T00:00:00Z
kernel-0:5.14.0-284.11.1.el9_2 cpe:/o:redhat:enterprise_linux:9 RHSA-2023:2458 2023-05-09T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/0082e99a9074ff88eff729c70c93454c8588d8e1 cve-icon cve-icon
https://git.kernel.org/stable/c/53f62a4201be1cfc1e3c971e566888b182c3ffb0 cve-icon cve-icon
https://git.kernel.org/stable/c/69cb8e9d8cd97cdf5e293b26d70a9dee3e35e6bd cve-icon cve-icon
https://git.kernel.org/stable/c/72b850a2a996f72541172e7cf686d54a2b29bcd8 cve-icon cve-icon
https://git.kernel.org/stable/c/7bdfb01fc5f6b3696728aeb527c50386e0ee09a1 cve-icon cve-icon
https://git.kernel.org/stable/c/80288883294c5b4ed18bae0d8bd9c4a12f297074 cve-icon cve-icon
https://git.kernel.org/stable/c/952b3dc02baaae6a69c71c0aca23e06741182d9a cve-icon cve-icon
https://git.kernel.org/stable/c/a6805b3dcf5cd41f2ae3a03dca43411135b99849 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025061835-CVE-2022-50020-6f27@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50020 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50020 cve-icon
History

Wed, 02 Jul 2025 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
Weaknesses CWE-1284
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Thu, 19 Jun 2025 15:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Wed, 18 Jun 2025 11:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration attempting to grow the fs by a negative amount, which trips a BUG_ON and leaves the fs with a corrupted in-memory superblock.
Title ext4: avoid resizing to a partial cluster size
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-06-18T11:01:24.227Z

Updated: 2025-06-18T11:01:24.227Z

Reserved: 2025-06-18T10:57:27.393Z

Link: CVE-2022-50020

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-06-18T11:15:30.150

Modified: 2025-06-18T13:46:52.973

Link: CVE-2022-50020

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-06-18T00:00:00Z

Links: CVE-2022-50020 - Bugzilla