CVE-2022-50864nilfs2: fix shift-out-of-bounds due to too large exponent of block size
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds due to too large exponent of block size If field s_log_block_size of superblock data is corrupted and too large, init_nilfs() and load_nilfs() still can trigger a shift-out-of-bounds warning followed by a kernel panic (if panic_on_warn is set): shift exponent 38973 is too large for 32-bit type 'int' Call Trace: <TASK> dump_stack_lvl+0xcd/0x134 ubsan_epilogue+0xb/0x50 __ubsan_handle_shift_out_of_bounds.cold.12+0x17b/0x1f5 init_nilfs.cold.11+0x18/0x1d [nilfs2] nilfs_mount+0x9b5/0x12b0 [nilfs2] ... This fixes the issue by adding and using a new helper function for getting block size with sanity check.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f before ec93b5430ec0f60877a5388bb023d60624f9ab9f; from 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f before 8b6ef451b5701b37d9a5905534595776a662edfc; from 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f before ddb6615a168f97b91175e00eda4c644741cf531c; from 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f before a16731fa1b96226c75bbf18e73513b14fc318360; from 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f before ebeccaaef67a4895d2496ab8d9c2fb8d89201211 | CNA record |
References
- https://git.kernel.org/stable/c/ec93b5430ec0f60877a5388bb023d60624f9ab9f
- https://git.kernel.org/stable/c/8b6ef451b5701b37d9a5905534595776a662edfc
- https://git.kernel.org/stable/c/ddb6615a168f97b91175e00eda4c644741cf531c
- https://git.kernel.org/stable/c/a16731fa1b96226c75bbf18e73513b14fc318360
- https://git.kernel.org/stable/c/ebeccaaef67a4895d2496ab8d9c2fb8d89201211
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.