In the Linux kernel, the following vulnerability has been resolved:

ext4: fix error handling in ext4_fc_record_modified_inode()

Current code does not fully takes care of krealloc() error case, which
could lead to silent memory corruption or a kernel bug. This patch
fixes that.

Also it cleans up some duplicated error handling logic from various
functions in fast_commit.c file.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00038.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 affected < 62e46e0ffc02daa8fcfc02f7a932cc8a19601b19
8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 affected < 1b6762ecdf3cf12113772427c904aa3c420a1802
8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 affected < 14aa3f49c7fc6424763f4323bfbc3a807b0727dc
8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 affected < cdce59a1549190b66f8e3fe465c2b2f714b98a94
Linux Linux affected
Version Status Constraints
5.10 affected —
0 unaffected < 5.10
5.10.99 unaffected ≤ 5.10.*
5.15.22 unaffected ≤ 5.15.*
5.16.8 unaffected ≤ 5.16.*
5.17 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/14aa3f49c7fc6424763f4323bfbc3a807b0727dc cve-icon cve-icon
https://git.kernel.org/stable/c/1b6762ecdf3cf12113772427c904aa3c420a1802 cve-icon cve-icon
https://git.kernel.org/stable/c/62e46e0ffc02daa8fcfc02f7a932cc8a19601b19 cve-icon cve-icon
https://git.kernel.org/stable/c/cdce59a1549190b66f8e3fe465c2b2f714b98a94 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024062054-CVE-2022-48712-6289@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48712 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48712 cve-icon
History

Wed, 17 Sep 2025 17:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 6.0, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Thu, 19 Dec 2024 09:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 12 Sep 2024 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-23T13:20:04.775Z

Reserved: 2024-06-20T11:09:39.050Z

Link: CVE-2022-48712

cve-icon Vulnrichment

Updated: 2024-08-03T15:17:55.868Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-20T11:15:54.880

Modified: 2025-09-17T17:12:00.207

Link: CVE-2022-48712

cve-icon Redhat

Severity : Low

Publid Date: 2024-06-20T00:00:00Z

Links: CVE-2022-48712 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-07-12T15:42:35Z

Weaknesses