CVE - CVE-2022-49739

CVE-ID
CVE-2022-49739	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed (inline) inodes is within the allowed range when reading inodes from disk (gfs2_dinode_in()). This prevents us from on-disk corruption. The two checks in stuffed_readpage() and gfs2_unstuffer_page() that just truncate inline data to the maximum allowed size don't actually make sense, and they can be removed now as well.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/45df749f827c286adbc951f2a4865b67f0442ba9 URL:https://git.kernel.org/stable/c/45df749f827c286adbc951f2a4865b67f0442ba9 MISC:https://git.kernel.org/stable/c/46c9088cabd4d0469fdb61ac2a9c5003057fe94d URL:https://git.kernel.org/stable/c/46c9088cabd4d0469fdb61ac2a9c5003057fe94d MISC:https://git.kernel.org/stable/c/4d4cb76636134bf9a0c9c3432dae936f99954586 URL:https://git.kernel.org/stable/c/4d4cb76636134bf9a0c9c3432dae936f99954586 MISC:https://git.kernel.org/stable/c/70376c7ff31221f1d21db5611d8209e677781d3a URL:https://git.kernel.org/stable/c/70376c7ff31221f1d21db5611d8209e677781d3a MISC:https://git.kernel.org/stable/c/7c414f6f06e9a3934901b6edc3177ae5a1e07094 URL:https://git.kernel.org/stable/c/7c414f6f06e9a3934901b6edc3177ae5a1e07094 MISC:https://git.kernel.org/stable/c/d458a0984429c2d47e60254f5bc4119cbafe83a2 URL:https://git.kernel.org/stable/c/d458a0984429c2d47e60254f5bc4119cbafe83a2
Assigning CNA
kernel.org
Date Record Created
20250327	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250327)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)