CVE-2022-50762

Unknown Unknown - Not Provided

Integer Overflow in Linux Kernel NTFS3 Driver Causes UBSAN Error

Publication date: 2025-12-24

Last updated on: 2025-12-24

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() syzbot reported UBSAN error as below: [ 76.901829][ T6677] ================================================================================ [ 76.903908][ T6677] UBSAN: shift-out-of-bounds in fs/ntfs3/super.c:675:13 [ 76.905363][ T6677] shift exponent -247 is negative This patch avoid this error.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-24

Last Modified

2025-12-24

Generated

2026-07-06

AI Q&A

2025-12-25

EPSS Evaluated

2026-07-05

NVD

CVE-2022-50762

EUVD

EUVD-2022-55799

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Mitigation Strategies

Apply the patch that resolves the UBSAN error in the Linux kernel's fs/ntfs3 module to avoid the shift-out-of-bounds error in true_sectors_per_clst().

Executive Summary

This vulnerability is a UBSAN (Undefined Behavior Sanitizer) error in the Linux kernel's NTFS3 filesystem driver, specifically in the function true_sectors_per_clst(). It involves a shift-out-of-bounds error where a negative shift exponent (-247) occurs, which can cause undefined behavior or kernel errors. The patch avoids this error by correcting the code to prevent the invalid shift operation.

Impact Analysis

This vulnerability can cause kernel errors or crashes due to undefined behavior in the NTFS3 filesystem driver when processing certain data. This may lead to system instability or denial of service if exploited or triggered.

Hi! I’m here to help you understand CVE-2022-50762. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70