cveboard RSS feed

CVE-2022-49425

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

f2fs: fix dereference of stale list iterator after loop body

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix dereference of stale list iterator after loop body The list iterator variable will be a bogus pointer if no break was hit. Dereferencing it (cur->page in this case) could load an out-of-bounds/undefined value making it unsafe to use that in the comparision to determine if the specific element was found. Since 'cur->page' *can* be out-ouf-bounds it cannot be guaranteed that by chance (or intention of an attacker) it matches the value of 'page' even though the correct element was not found. This is fixed by using a separate list iterator variable for the loop and only setting the original variable if a suitable element was found. Then determing if the element was found is simply checking if the variable is set.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8c242db9b8c01b252290e23827163787f07e01d1affectedgit385edd3ce5b4b1e9d31f474a5e35a39779ec1110UnavailableNone listed
8c242db9b8c01b252290e23827163787f07e01d1affectedgit5e47a7add3dda7f236548c5ec3017776dc2a729fUnavailableNone listed
8c242db9b8c01b252290e23827163787f07e01d1affectedgit51d584704d18e60fa473823654f35611c777b291UnavailableNone listed
8c242db9b8c01b252290e23827163787f07e01d1affectedgit45b2b7d7108ae1e25a5036cab04ab9273e792332UnavailableNone listed
8c242db9b8c01b252290e23827163787f07e01d1affectedgitb26e1c777890e4b938136deb8ec07a29f33862e4UnavailableNone listed
8c242db9b8c01b252290e23827163787f07e01d1affectedgited7efc472c00986dcd6903ab6ed165c7fa167674UnavailableNone listed
8c242db9b8c01b252290e23827163787f07e01d1affectedgit2aaf51dd39afb6d01d13f1e6fe20b684733b37d5UnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.12affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver4.12UnavailableNone listed
4.19.247unaffectedsemverUnavailable4.19.*None listed
5.4.198unaffectedsemverUnavailable5.4.*None listed
5.10.121unaffectedsemverUnavailable5.10.*None listed
5.15.46unaffectedsemverUnavailable5.15.*None listed
5.17.14unaffectedsemverUnavailable5.17.*None listed
5.18.3unaffectedsemverUnavailable5.18.*None listed
5.19unaffectedoriginal_commit_for_fixUnavailable*None listed