In the Linux kernel, the following vulnerability has been resolved:

f2fs: let's avoid panic if extent_tree is not created

This patch avoids the below panic.

pc : __lookup_extent_tree+0xd8/0x760
lr : f2fs_do_write_data_page+0x104/0x87c
sp : ffffffc010cbb3c0
x29: ffffffc010cbb3e0 x28: 0000000000000000
x27: ffffff8803e7f020 x26: ffffff8803e7ed40
x25: ffffff8803e7f020 x24: ffffffc010cbb460
x23: ffffffc010cbb480 x22: 0000000000000000
x21: 0000000000000000 x20: ffffffff22e90900
x19: 0000000000000000 x18: ffffffc010c5d080
x17: 0000000000000000 x16: 0000000000000020
x15: ffffffdb1acdbb88 x14: ffffff888759e2b0
x13: 0000000000000000 x12: ffffff802da49000
x11: 000000000a001200 x10: ffffff8803e7ed40
x9 : ffffff8023195800 x8 : ffffff802da49078
x7 : 0000000000000001 x6 : 0000000000000000
x5 : 0000000000000006 x4 : ffffffc010cbba28
x3 : 0000000000000000 x2 : ffffffc010cbb480
x1 : 0000000000000000 x0 : ffffff8803e7ed40
Call trace:
__lookup_extent_tree+0xd8/0x760
f2fs_do_write_data_page+0x104/0x87c
f2fs_write_single_data_page+0x420/0xb60
f2fs_write_cache_pages+0x418/0xb1c
__f2fs_write_data_pages+0x428/0x58c
f2fs_write_data_pages+0x30/0x40
do_writepages+0x88/0x190
__writeback_single_inode+0x48/0x448
writeback_sb_inodes+0x468/0x9e8
__writeback_inodes_wb+0xb8/0x2a4
wb_writeback+0x33c/0x740
wb_do_writeback+0x2b4/0x400
wb_workfn+0xe4/0x34c
process_one_work+0x24c/0x5bc
worker_thread+0x3e8/0xa50
kthread+0x150/0x1b4

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00015.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 affected < dd83a9763e29ed7a21c8a43f7a62cd0a6bf74692
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 affected < ff85a1dbd90d29f73033177ff8d8de4a27d9721c
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 affected < 557e85ff9afef6d45020b6f09357111d38033c31
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 affected < 72009139a661ade5cb1da4239734ed02fa1cfff0
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 affected < 2c129e868992621a739bdd57a5bffa3985ef1b91
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 affected < 1c38cdc747f00daf7394535eae5afc4c503c59bb
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 affected < df9d44b645b83fffccfb4e28c1f93376585fdec8
Linux Linux affected
Version Status Constraints
3.8 affected —
0 unaffected < 3.8
4.14.304 unaffected ≤ 4.14.*
4.19.271 unaffected ≤ 4.19.*
5.4.230 unaffected ≤ 5.4.*
5.10.165 unaffected ≤ 5.10.*
5.15.90 unaffected ≤ 5.15.*
6.1.8 unaffected ≤ 6.1.*
6.2 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1c38cdc747f00daf7394535eae5afc4c503c59bb cve-icon cve-icon
https://git.kernel.org/stable/c/2c129e868992621a739bdd57a5bffa3985ef1b91 cve-icon cve-icon
https://git.kernel.org/stable/c/557e85ff9afef6d45020b6f09357111d38033c31 cve-icon cve-icon
https://git.kernel.org/stable/c/72009139a661ade5cb1da4239734ed02fa1cfff0 cve-icon cve-icon
https://git.kernel.org/stable/c/dd83a9763e29ed7a21c8a43f7a62cd0a6bf74692 cve-icon cve-icon
https://git.kernel.org/stable/c/df9d44b645b83fffccfb4e28c1f93376585fdec8 cve-icon cve-icon
https://git.kernel.org/stable/c/ff85a1dbd90d29f73033177ff8d8de4a27d9721c cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024082107-CVE-2022-48877-6196@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-48877 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-48877 cve-icon
History

Wed, 25 Sep 2024 10:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 05 Sep 2024 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Wed, 21 Aug 2024 21:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 21 Aug 2024 06:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: f2fs: let's avoid panic if extent_tree is not created This patch avoids the below panic. pc : __lookup_extent_tree+0xd8/0x760 lr : f2fs_do_write_data_page+0x104/0x87c sp : ffffffc010cbb3c0 x29: ffffffc010cbb3e0 x28: 0000000000000000 x27: ffffff8803e7f020 x26: ffffff8803e7ed40 x25: ffffff8803e7f020 x24: ffffffc010cbb460 x23: ffffffc010cbb480 x22: 0000000000000000 x21: 0000000000000000 x20: ffffffff22e90900 x19: 0000000000000000 x18: ffffffc010c5d080 x17: 0000000000000000 x16: 0000000000000020 x15: ffffffdb1acdbb88 x14: ffffff888759e2b0 x13: 0000000000000000 x12: ffffff802da49000 x11: 000000000a001200 x10: ffffff8803e7ed40 x9 : ffffff8023195800 x8 : ffffff802da49078 x7 : 0000000000000001 x6 : 0000000000000000 x5 : 0000000000000006 x4 : ffffffc010cbba28 x3 : 0000000000000000 x2 : ffffffc010cbb480 x1 : 0000000000000000 x0 : ffffff8803e7ed40 Call trace: __lookup_extent_tree+0xd8/0x760 f2fs_do_write_data_page+0x104/0x87c f2fs_write_single_data_page+0x420/0xb60 f2fs_write_cache_pages+0x418/0xb1c __f2fs_write_data_pages+0x428/0x58c f2fs_write_data_pages+0x30/0x40 do_writepages+0x88/0x190 __writeback_single_inode+0x48/0x448 writeback_sb_inodes+0x468/0x9e8 __writeback_inodes_wb+0xb8/0x2a4 wb_writeback+0x33c/0x740 wb_do_writeback+0x2b4/0x400 wb_workfn+0xe4/0x34c process_one_work+0x24c/0x5bc worker_thread+0x3e8/0xa50 kthread+0x150/0x1b4
Title f2fs: let's avoid panic if extent_tree is not created
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-07-11T17:19:03.837Z

Reserved: 2024-07-16T11:38:08.922Z

Link: CVE-2022-48877

cve-icon Vulnrichment

Updated: 2024-09-11T12:42:11.867Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-21T07:15:04.563

Modified: 2024-09-05T17:47:28.647

Link: CVE-2022-48877

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-08-21T00:00:00Z

Links: CVE-2022-48877 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses