CVE-2022-49317

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Feb 26, 2025
Updated: Mar 13, 2025
CWE ID 835

Summary

CVE-2022-49317 is a vulnerability affecting the Linux kernel's f2fs file system. The issue involves an infinite loop that can be triggered during the flush node pages process. This loop occurs due to an error condition in the xfstests/generic/475 test case, which results in an EIO error and causes the node pages to be flushed indefinitely. The affected functions include f2fs_submit_page_bio, read_node_page, and f2fs_get_dnode_of_data. This issue can lead to system instability and potential crashes. To mitigate this vulnerability, the affected code has been resolved in the Linux kernel.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share