CVE-2022-49739 Details
Description
In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed (inline) inodes is within the allowed range when reading inodes from disk (gfs2_dinode_in()). This prevents us from on-disk corruption. The two checks in stuffed_readpage() and gfs2_unstuffer_page() that just truncate inline data to the maximum allowed size don't actually make sense, and they can be removed now as well.
A vulnerability in the Linux kernel's GFS2 file system has been addressed, which involved improper handling of inline inodes. The issue arose because the inode size of stuffed (inline) inodes was not properly checked against allowed limits when reading inodes from disk. This oversight could lead to on-disk corruption. The vulnerability has been resolved by ensuring that the inode size is always verified, preventing potential corruption. Additionally, two redundant checks that merely truncated inline data to a maximum allowed size have been removed, as they were unnecessary.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/45df749f827c286adbc951f2a4865b67f0442ba9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/46c9088cabd4d0469fdb61ac2a9c5003057fe94d | kernel.org | Patch |
| https://git.kernel.org/stable/c/4d4cb76636134bf9a0c9c3432dae936f99954586 | kernel.org | Patch |
| https://git.kernel.org/stable/c/70376c7ff31221f1d21db5611d8209e677781d3a | kernel.org | Patch |
| https://git.kernel.org/stable/c/7c414f6f06e9a3934901b6edc3177ae5a1e07094 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d458a0984429c2d47e60254f5bc4119cbafe83a2 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | < 4.19.280 >= 4.20, < 5.4.240 >= 5.5, < 5.10.177 >= 5.11, < 5.15.93 >= 5.16, < 6.1.11 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 30, 2025 | Initial Analysis | [email protected] |
| Mar 27, 2025 | New CVE Received | kernel.org |