In the Linux kernel, the following vulnerability has been resolved:

fs: jfs: fix shift-out-of-bounds in dbDiscardAG

This should be applied to most URSAN bugs found recently by syzbot,
by guarding the dbMount. As syzbot feeding rubbish into the bmap
descriptor.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00013.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< f8d4d0bac603616e2fa4a3907e81ed13f8f3c380
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< 0183c8f46ab5bcd0740f41c87f5141c6ca2bf1bb
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< 624843f1bac448150f6859999c72c4841c14a2e3
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< 50163a115831ef4e6402db5a7ef487d1989d7249
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< 911999b193735cd378517b6cd5fe585ee345d49c
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< 10b87da8fae79c7daf5eda6a9e4f1d31b85b4d92
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< ab5cd3d62c2493eca3337e7d0178cc7bd819ca64
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< 3d340b684dcec5e34efc470227cd1c7d2df121ad
b40c2e665cd552eae5fbdbb878bc29a34357668e affected
< 25e70c6162f207828dd405b432d8f2a98dbf7082
Linux Linux affected
Version Status Constraints
3.7 affected
—
0 unaffected
< 3.7
4.9.337 unaffected
≤ 4.9.*
4.14.303 unaffected
≤ 4.14.*
4.19.270 unaffected
≤ 4.19.*
5.4.229 unaffected
≤ 5.4.*
5.10.163 unaffected
≤ 5.10.*
5.15.86 unaffected
≤ 5.15.*
6.0.16 unaffected
≤ 6.0.*
6.1.2 unaffected
≤ 6.1.*
6.2 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

Vendor Product Confidence Versions
Linux Linux Kernel — —

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-55522 In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG This should be applied to most URSAN bugs found recently by syzbot, by guarding the dbMount. As syzbot feeding rubbish into the bmap descriptor.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0183c8f46ab5bcd0740f41c87f5141c6ca2bf1bb cve-icon cve-icon
https://git.kernel.org/stable/c/10b87da8fae79c7daf5eda6a9e4f1d31b85b4d92 cve-icon cve-icon
https://git.kernel.org/stable/c/25e70c6162f207828dd405b432d8f2a98dbf7082 cve-icon cve-icon
https://git.kernel.org/stable/c/3d340b684dcec5e34efc470227cd1c7d2df121ad cve-icon cve-icon
https://git.kernel.org/stable/c/50163a115831ef4e6402db5a7ef487d1989d7249 cve-icon cve-icon
https://git.kernel.org/stable/c/624843f1bac448150f6859999c72c4841c14a2e3 cve-icon cve-icon
https://git.kernel.org/stable/c/911999b193735cd378517b6cd5fe585ee345d49c cve-icon cve-icon
https://git.kernel.org/stable/c/ab5cd3d62c2493eca3337e7d0178cc7bd819ca64 cve-icon cve-icon
https://git.kernel.org/stable/c/f8d4d0bac603616e2fa4a3907e81ed13f8f3c380 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091555-CVE-2022-50333-d81f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50333 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50333 cve-icon
History

Thu, 04 Dec 2025 14:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Tue, 16 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Mon, 15 Sep 2025 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG This should be applied to most URSAN bugs found recently by syzbot, by guarding the dbMount. As syzbot feeding rubbish into the bmap descriptor.
Title fs: jfs: fix shift-out-of-bounds in dbDiscardAG
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-23T13:28:34.418Z

Reserved: 2025-09-15T14:18:36.816Z

Link: CVE-2022-50333

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-09-15T15:15:45.537

Modified: 2025-12-04T13:48:21.410

Link: CVE-2022-50333

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-15T00:00:00Z

Links: CVE-2022-50333 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-09-17T10:07:01Z

Weaknesses