SECUFOCUSNOW
Home›CVE index›CVE-2022-49349
Review reviewHigh

CVE-2022-49349

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_rename_dir_prepare We got issue as follows: EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue ext4_get_first_dir_block: bh->b_data=0xffff88810bee6000 len=34478 ext4_get_first_dir_block: *parent_de=0xffff88810beee6ae bh->b_data=0xffff88810bee6000 ext4_rename_dir_prepare: [1] parent_de=0xffff88810beee6ae ================================================================== BUG: KASAN: use-after-free in ext4_rename_dir_prepare+0x152/0x220 Read of size 4 at addr ffff88810b...

CVSS
7.8
EPSS
0.29%
21.2% percentile
CISA KEV
Not listed
Published
2025.02.26
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.29%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4_rename_dir_prepare We got issue as follows: EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue ext4_get_first_dir_block: bh->b_data=0xffff88810bee6000 len=34478 ext4_get_first_dir_block: *parent_de=0xffff88810beee6ae bh->b_data=0xffff88810bee6000 ext4_rename_dir_prepare: [1] parent_de=0xffff88810beee6ae ================================================================== BUG: KASAN: use-after-free in ext4_rename_dir_prepare+0x152/0x220 Read of size 4 at addr ffff88810b...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < 1a3a15bf6f9963d755270cbdb282863b84839195, >= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < 97f802a652a749422dede32071d29a53cf4bd034, >= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < 10801095224de0d0ab06ae60698680c1f883a3ae, >= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < eaecf7ebfd5dd09038a80b14be46b844f54cfc5c, >= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < dd887f83ea54aea5b780a84527e23ab95f777fed, >= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < 364380c00912bed9b5d99eb485018360b0ecf64f, >= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < 0ff38b99fa075ddd246487a28cb9af049f4ceef1, >= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < 4a2bea60cf7ff957b3eda0b17750d483876a02fa, >= 32f7f22c0b52e8189fef83986b16dc7abe95f2c4 < 0be698ecbe4471fcad80e81ec6a05001421041b3, >= 3.8, < 4.9.318, >= 4.10 < 4.14.283, >= 4.15 < 4.19.247, >= 4.20 < 5.4.198, >= 5.5 < 5.10.121, >= 5.11 < 5.15.46, >= 5.16 < 5.17.14, >= 5.18 < 5.18.3
Fixed versions
4.9.318, 4.14.283, 4.19.247, 5.4.198, 5.10.121, 5.15.46, 5.17.14, 5.18.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE
CWE-416