CVE-2022-50864

Source
https://cve.org/CVERecord?id=CVE-2022-50864
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50864.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50864
Downstream
Related
Published
2025-12-30T12:15:36.489Z
Modified
2026-03-20T11:47:39.434546Z
Summary
nilfs2: fix shift-out-of-bounds due to too large exponent of block size
Details

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix shift-out-of-bounds due to too large exponent of block size

If field slogblocksize of superblock data is corrupted and too large, initnilfs() and loadnilfs() still can trigger a shift-out-of-bounds warning followed by a kernel panic (if panicon_warn is set):

shift exponent 38973 is too large for 32-bit type 'int' Call Trace: <TASK> dumpstacklvl+0xcd/0x134 ubsan_epilogue+0xb/0x50 _ubsanhandleshiftoutofbounds.cold.12+0x17b/0x1f5 initnilfs.cold.11+0x18/0x1d [nilfs2] nilfsmount+0x9b5/0x12b0 [nilfs2] ...

This fixes the issue by adding and using a new helper function for getting block size with sanity check.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50864.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8a9d2191e9f43bbcd256a9a6871bd73434c83f2f
Fixed
ec93b5430ec0f60877a5388bb023d60624f9ab9f
Fixed
8b6ef451b5701b37d9a5905534595776a662edfc
Fixed
ddb6615a168f97b91175e00eda4c644741cf531c
Fixed
a16731fa1b96226c75bbf18e73513b14fc318360
Fixed
ebeccaaef67a4895d2496ab8d9c2fb8d89201211

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50864.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.30
Fixed
5.10.163
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.86
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.16
Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50864.json"