In the Linux kernel, the following vulnerability has been resolved:
ext4: add EXT4IGETBAD flag to prevent unexpected bad inode
There are many places that will get unhappy (and crash) when ext4iget() returns a bad inode. However, if iget the boot loader inode, allows a bad inode to be returned, because the inode may not be initialized. This mechanism can be used to bypass some checks and cause panic. To solve this problem, we add a special iget flag EXT4IGETBAD. Only with this flag we'd be returning bad inode from ext4iget(), otherwise we always return the error code if the inode is bad inode.(suggested by Jan Kara)
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-0ee36928",
"target": {
"file": "fs/ext4/inode.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"73981557742890153120418348412118968664",
"195066463900749566580391842172874960789",
"244474663259354642074970590949464359616",
"212723770128592436284282183948695125385"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f725b290ed79ad61e4f721fee95a287892d8b1ad",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-0fe8b23c",
"target": {
"function": "__ext4_iget",
"file": "fs/ext4/inode.c"
},
"signature_type": "Function",
"digest": {
"length": 8022.0,
"function_hash": "71161602377631626160718417813070645694"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7e6b5548f915d7aa435d0764d41eacfb49c6e09",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-11b3be5b",
"target": {
"function": "__ext4_iget",
"file": "fs/ext4/inode.c"
},
"signature_type": "Function",
"digest": {
"length": 8079.0,
"function_hash": "38989337788334141505015411587458344213"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-1a505816",
"target": {
"file": "fs/ext4/ext4.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"168697485827437095415690635022334700965",
"149634368777869722491842530520919742827",
"223343458110495992320027644450900266289",
"30479274075711510867859228988040176017"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-1ecb1c69",
"target": {
"file": "fs/ext4/inode.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"73981557742890153120418348412118968664",
"195066463900749566580391842172874960789",
"244474663259354642074970590949464359616",
"212723770128592436284282183948695125385"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-21ffef7a",
"target": {
"function": "__ext4_iget",
"file": "fs/ext4/inode.c"
},
"signature_type": "Function",
"digest": {
"length": 7849.0,
"function_hash": "88607827481930845377593823829305623304"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-2310e9e8",
"target": {
"function": "__ext4_iget",
"file": "fs/ext4/inode.c"
},
"signature_type": "Function",
"digest": {
"length": 8022.0,
"function_hash": "71161602377631626160718417813070645694"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2142dfa1de61e25b83198af0308ec7689cca25d3",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-2aad3756",
"target": {
"function": "swap_inode_boot_loader",
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Function",
"digest": {
"length": 2911.0,
"function_hash": "197837158452472129596450887155881461593"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@488a5c2bf7543c3cd3f07a025f2e62be91599430",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-2b0686e9",
"target": {
"file": "fs/ext4/inode.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"73981557742890153120418348412118968664",
"195066463900749566580391842172874960789",
"244474663259354642074970590949464359616",
"212723770128592436284282183948695125385"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f725b290ed79ad61e4f721fee95a287892d8b1ad",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-550c365a",
"target": {
"file": "fs/ext4/inode.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"73981557742890153120418348412118968664",
"195066463900749566580391842172874960789",
"244474663259354642074970590949464359616",
"212723770128592436284282183948695125385"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2142dfa1de61e25b83198af0308ec7689cca25d3",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-603097d1",
"target": {
"file": "fs/ext4/ext4.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"168697485827437095415690635022334700965",
"149634368777869722491842530520919742827",
"223343458110495992320027644450900266289",
"30479274075711510867859228988040176017"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7e6b5548f915d7aa435d0764d41eacfb49c6e09",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-618cb790",
"target": {
"file": "fs/ext4/inode.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"73981557742890153120418348412118968664",
"195066463900749566580391842172874960789",
"244474663259354642074970590949464359616",
"212723770128592436284282183948695125385"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@488a5c2bf7543c3cd3f07a025f2e62be91599430",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-6aea346c",
"target": {
"file": "fs/ext4/ext4.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"168697485827437095415690635022334700965",
"149634368777869722491842530520919742827",
"223343458110495992320027644450900266289",
"30479274075711510867859228988040176017"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-6eb7d033",
"target": {
"function": "swap_inode_boot_loader",
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Function",
"digest": {
"length": 2984.0,
"function_hash": "301239201235603330878981496208522532778"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f725b290ed79ad61e4f721fee95a287892d8b1ad",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-7f822246",
"target": {
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92162152064680424277723965893725754117",
"168571305234818555885410803361046296897",
"70432543390030348843265592042454316038",
"281316878551917777421006904766308214298"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2142dfa1de61e25b83198af0308ec7689cca25d3",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-81fa46b3",
"target": {
"function": "__ext4_iget",
"file": "fs/ext4/inode.c"
},
"signature_type": "Function",
"digest": {
"length": 7617.0,
"function_hash": "103096690288626000443616000377610633171"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2142dfa1de61e25b83198af0308ec7689cca25d3",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-8376d1b2",
"target": {
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92162152064680424277723965893725754117",
"168571305234818555885410803361046296897",
"70432543390030348843265592042454316038",
"281316878551917777421006904766308214298"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-861935f3",
"target": {
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92162152064680424277723965893725754117",
"168571305234818555885410803361046296897",
"70432543390030348843265592042454316038",
"281316878551917777421006904766308214298"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7e6b5548f915d7aa435d0764d41eacfb49c6e09",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-9c65901e",
"target": {
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92162152064680424277723965893725754117",
"168571305234818555885410803361046296897",
"70432543390030348843265592042454316038",
"281316878551917777421006904766308214298"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f725b290ed79ad61e4f721fee95a287892d8b1ad",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-9d54566b",
"target": {
"function": "swap_inode_boot_loader",
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Function",
"digest": {
"length": 2982.0,
"function_hash": "43111034042669804948839381377951119959"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7e6b5548f915d7aa435d0764d41eacfb49c6e09",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-a0e65b2b",
"target": {
"function": "swap_inode_boot_loader",
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Function",
"digest": {
"length": 2961.0,
"function_hash": "113755053168609541616271345493607775135"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-b1500ec1",
"target": {
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92162152064680424277723965893725754117",
"168571305234818555885410803361046296897",
"70432543390030348843265592042454316038",
"281316878551917777421006904766308214298"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2142dfa1de61e25b83198af0308ec7689cca25d3",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-b5156eb0",
"target": {
"file": "fs/ext4/inode.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"73981557742890153120418348412118968664",
"195066463900749566580391842172874960789",
"244474663259354642074970590949464359616",
"212723770128592436284282183948695125385"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@488a5c2bf7543c3cd3f07a025f2e62be91599430",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-bbc93cba",
"target": {
"function": "swap_inode_boot_loader",
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Function",
"digest": {
"length": 2982.0,
"function_hash": "43111034042669804948839381377951119959"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f725b290ed79ad61e4f721fee95a287892d8b1ad",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-e1373451",
"target": {
"file": "fs/ext4/ext4.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"168697485827437095415690635022334700965",
"149634368777869722491842530520919742827",
"223343458110495992320027644450900266289",
"30479274075711510867859228988040176017"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63b1e9bccb71fe7d7e3ddc9877dbdc85e5d2d023",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-e23190bc",
"target": {
"function": "swap_inode_boot_loader",
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Function",
"digest": {
"length": 2982.0,
"function_hash": "43111034042669804948839381377951119959"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@488a5c2bf7543c3cd3f07a025f2e62be91599430",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-e8b33772",
"target": {
"function": "__ext4_iget",
"file": "fs/ext4/inode.c"
},
"signature_type": "Function",
"digest": {
"length": 8022.0,
"function_hash": "71161602377631626160718417813070645694"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0a738875c2e9c8c3366d792f8bf7fe508d5e5a5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-eaccaf99",
"target": {
"file": "fs/ext4/ext4.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"168697485827437095415690635022334700965",
"149634368777869722491842530520919742827",
"223343458110495992320027644450900266289",
"30479274075711510867859228988040176017"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@488a5c2bf7543c3cd3f07a025f2e62be91599430",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-f46bc57c",
"target": {
"file": "fs/ext4/ioctl.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92162152064680424277723965893725754117",
"168571305234818555885410803361046296897",
"70432543390030348843265592042454316038",
"281316878551917777421006904766308214298"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7e6b5548f915d7aa435d0764d41eacfb49c6e09",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2022-50485-fa4fa8fb",
"target": {
"file": "fs/ext4/ext4.h"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"168697485827437095415690635022334700965",
"149634368777869722491842530520919742827",
"223343458110495992320027644450900266289",
"30479274075711510867859228988040176017"
]
}
}
]