CVE-2022-50300
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-15

Last updated on: 2025-12-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when handling missing device in read_one_chunk Store the error code before freeing the extent_map. Though it's reference counted structure, in that function it's the first and last allocation so this would lead to a potential use-after-free. The error can happen eg. when chunk is stored on a missing device and the degraded mount option is missing. Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=216721
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-15
Last Modified
2025-12-04
Generated
2026-05-07
AI Q&A
2025-09-15
EPSS Evaluated
2026-05-05
NVD
CVE-2022-50300
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 4.15 (inc) to 5.15.87 (exc)
linux linux_kernel From 5.16 (inc) to 6.0.18 (exc)
linux linux_kernel From 6.1 (inc) to 6.1.4 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a use-after-free issue in the Linux kernel's btrfs filesystem code. Specifically, it occurs when handling an extent map related to a missing device during a read operation. The code frees a reference-counted structure (extent_map) but then attempts to use it afterward, which can lead to undefined behavior or crashes. This happens when a chunk is stored on a missing device and the degraded mount option is not enabled.


How can this vulnerability impact me? :

The use-after-free vulnerability can cause system instability, crashes, or potential data corruption when accessing btrfs filesystems with missing devices under certain conditions. This could lead to denial of service or data loss if exploited or triggered unintentionally.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart