CVE-2022-49343: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its hands while doing a node split and consequently accessing unallocated memory. Fix the problem by verifying traversed block numbers are unique.

Affected products

• Linux Linux Kernel: before 4.14.283 (fixed in 4.14.283); from 4.15, before 4.19.247 (fixed in 4.19.247); from 4.20, before 5.4.198 (fixed in 5.4.198); from 5.5, before 5.10.121 (fixed in 5.10.121); from 5.11, before 5.15.46 (fixed in 5.15.46); from 5.16, before 5.17.14 (fixed in 5.17.14); …

Published 2025-02-26. Last modified 2026-08-04.