Shift-Out-of-Bounds Vulnerability in Linux Kernel JFS by Linux Foundation

CVE-2022-50333

What is CVE-2022-50333?

A shift-out-of-bounds vulnerability exists in the JFS filesystem of the Linux kernel, where improper validation of parameters introduced by syzbot could lead to exploitation through malformed bmap descriptors. This vulnerability underscores the importance of input validation and the necessity for robust guarding mechanisms in filesystem operations to prevent malicious interference.

References