CVE-2022-48946
In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead.
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udf_delete_aext() for deleting extent to avoid some code duplication.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.25% probability · 17th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/12a88f572d6d94b5c0b72e2d1782cc2e96ac06cfPatch
- https://git.kernel.org/stable/c/1a075f4a549481ce6e8518d8379f193ccec6b746Patch
- https://git.kernel.org/stable/c/4d835efd561dfb9bf5409f11f4ecd428d5d29226Patch
- https://git.kernel.org/stable/c/63dbbd8f1499b0a161e701a04aa50148d60bd1f7Patch
- https://git.kernel.org/stable/c/72f651c96c8aadf087fd782d551bf7db648a8c2ePatch
- https://git.kernel.org/stable/c/7665857f88557c372da35534165721156756f77fPatch
- https://git.kernel.org/stable/c/ae56d9a017724f130cf1a263dd82a78d2a6e3852Patch
- https://git.kernel.org/stable/c/c8b6fa4511a7900db9fb0353b630d4d2ed1ba99cPatch
- https://git.kernel.org/stable/c/cfe4c1b25dd6d2f056afc00b7c98bcb3dd0b1fc3Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.