CVE-2022-50465
BaseFortify
Publication date: 2025-10-01
Last updated on: 2025-10-02
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's ext4 filesystem involves leaking uninitialized memory in the fast-commit journal. Specifically, when there is unused space at the end of fast-commit journal blocks, that memory was not properly zeroed out, causing potentially sensitive uninitialized memory to be written to disk.
How can this vulnerability impact me? :
The impact of this vulnerability is that uninitialized memory, which may contain sensitive or residual data, could be leaked to disk. This could potentially expose sensitive information stored in memory to unauthorized parties who have access to the disk.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability could negatively affect compliance with data protection standards and regulations such as GDPR and HIPAA because leaking uninitialized memory to disk may result in unauthorized exposure of sensitive personal or protected health information.