Back
CVE-2022-50328
jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
High7.8EPSS 0.16%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: jbd2: fix potential use-after-free in jbd2_fc_wait_bufs In 'jbd2_fc_wait_bufs' use 'bh' after put buffer head reference count which may lead to use-after-free. So judge buffer if uptodate before put buffer head reference count.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.16% · top 94% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected ff780b91efe901b8eecd8114785abae5341820ad – < 1d4d16daec2a6689b6d3fbfc7d2078643adc6619
- affected ff780b91efe901b8eecd8114785abae5341820ad – < d11d2ded293976a1a0d9d9471827a44dc9e3c63f
- affected ff780b91efe901b8eecd8114785abae5341820ad – < 2e6d9f381c1ed844531a577783fc352de7a44c8a
- affected ff780b91efe901b8eecd8114785abae5341820ad – < effd9b3c029ecdd853a11933dcf857f5a7ca8c3d
- affected ff780b91efe901b8eecd8114785abae5341820ad – < 243d1a5d505d0b0460c9af0ad56ed4a56ef0bebd
- affected 5.10
- unaffected < 5.10
- unaffected 5.10.150 – ≤ 5.10.*
- unaffected 5.15.75 – ≤ 5.15.*
- unaffected 5.19.17 – ≤ 5.19.*
- unaffected 6.0.3 – ≤ 6.0.*
- unaffected 6.1 – ≤ *
References (5)
- https://git.kernel.org/stable/c/1d4d16daec2a6689b6d3fbfc7d2078643adc6619 (opens in a new tab)
- https://git.kernel.org/stable/c/d11d2ded293976a1a0d9d9471827a44dc9e3c63f (opens in a new tab)
- https://git.kernel.org/stable/c/2e6d9f381c1ed844531a577783fc352de7a44c8a (opens in a new tab)
- https://git.kernel.org/stable/c/effd9b3c029ecdd853a11933dcf857f5a7ca8c3d (opens in a new tab)
- https://git.kernel.org/stable/c/243d1a5d505d0b0460c9af0ad56ed4a56ef0bebd (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50328)Record last updated .