AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-50746

HIGH · CVSS 8.4 EPSS 0.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-24 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.4. It affects Linux.

CVE
CVE-2022-50746
Severity
HIGH
CVSS
8.4
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: erofs: validate the extent length for uncompressed pclusters syzkaller reported a KASAN use-after-free: https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2 The referenced fuzzed image actually has two issues: - m_pa == 0 as a non-inlined pcluster; - The logical length is longer than its physical length. The first issue has already been addressed. This patch addresses the second issue by checking the extent length validity.