CVE-2022-50864 - CVE House

Back to Database

Status published Unknown CVE-2022-50864

nilfs2: fix shift-out-of-bounds due to too large exponent of block size

0 CVSS

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds due to too large exponent of block size If field s_log_block_size of superblock data is corrupted and too large, init_nilfs() and load_nilfs() still can trigger a shift-out-of-bounds warning followed by a kernel panic (if panic_on_warn is set): shift exponent 38973 is too large for 32-bit type 'int' Call Trace: <TASK> dump_stack_lvl+0xcd/0x134 ubsan_epilogue+0xb/0x50 __ubsan_handle_shift_out_of_bounds.cold.12+0x17b/0x1f5 init_nilfs.cold.11+0x18/0x1d [nilfs2] nilfs_mount+0x9b5/0x12b0 [nilfs2] ... This fixes the issue by adding and using a new helper function for getting block size with sanity check.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-50864

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux

View All →

drm/vkms: Convert to DRM's vblank timer

drm/panthor: Recover from panthor_gpu_flush_caches() failures

PCI: endpoint: Add missing NULL check for alloc_workqueue()

fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()

fs/ntfs3: Initialize new folios before use

Affected Vendor

Linux

View all reports →

Affected Software

Linux

Vulnerable Versions:

8a9d2191e9f43bbcd256a9a6871bd73434c83f2f, 2.6.30, 0, 5.10.163, 5.15.86, 6.0.16, 6.1.2, 6.2

Timeline

Official Publish: December 30th, 2025

Last Modified: May 11th, 2026

Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.