Linux Kernel Vulnerability in Inode Count Validation by The Linux Foundation

CVE-2022-50205

What is CVE-2022-50205?

A vulnerability in the Linux Kernel affects the integrity of inode counts in file systems. The issue arises from insufficient validity checks that verify whether the number of inodes stored in the superblock aligns with the computed values derived from the inode allocation per group. This oversight may lead to system crashes when operating on corrupted file systems. Recent updates have integrated additional checks to ensure each group contains at least one block of inodes, thereby improving the kernel's resilience against filesystem corruption.

References