CVE-2022-50845 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4_xattr_inode_create() on an error path There is issue as follows when do setxattr with inject fault: [localhost]# fsck.ext4 -fn /dev/sda e2fsck 1.46.6-rc1 (12-Sep-2022) Pass 1: Checking inodes, blocks, and sizes Pass 2: Checking directory structure Pass 3: Checking directory connectivity Pass 4: Checking reference counts Unattached zero-length inode 15. Clear? no Unattached inode 15 Connect to /lost+found? no Pass 5: Checking group summary information /dev/sda: ********** WARNING: Filesystem still has errors ********** /dev/sda: 15/655360 files (0.0% non-contiguous), 66755/2621440 blocks This occurs in 'ext4_xattr_inode_create()'. If 'ext4_mark_inode_dirty()' fails, dropping i_nlink of the inode is needed. Or will lead to inode leak.
A vulnerability has been identified in the Linux kernel's ext4 file system, specifically in the xattr inode creation process. When the setxattr function is used and a fault is injected, an inode leak occurs if the function 'ext4_mark_inode_dirty()' fails. This issue can be detected using the 'fsck.ext4' command, which reveals an unattached inode, indicating a reference count error. The vulnerability arises because the failure to properly manage inode references can lead to resource leaks, potentially causing filesystem corruption.
Users can upgrade to the patched version of the Linux kernel where this vulnerability has been addressed. The specific commit containing the fix can be downloaded from the Linux kernel stable Git repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0f709e08caffb41bbc9b38b9a4c1bd0769794007 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/322cf639b0b7f137543072c55545adab782b3a25 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/70e5b46beba64706430a87a6d516054225e8ac8a | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/9882601ee689975c1c0076ee65bf222a2a35e535 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/9ef603086c5b796fde1c7f22a17d0fc826ba54cb | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e4db04f7d3dbbe16680e0ded27ea2a65b10f766a | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/eab94a46560f68d4bcd15222701ced479f84f427 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/fdaaf45786dc8c17a72901021772520fceb18f8c | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 30, 2025 | New CVE Received | kernel.org |