CVE-2022-50746

In the Linux kernel, the following vulnerability has been resolved: erofs: validate the extent length for uncompressed pclusters syzkaller reported a KASAN use-after-free: https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2 The referenced fuzzed image actually has two issues: - mpa == 0 ...

CVE-2022-50746

CVE-2022-50746 affects the Linux kernel’s erofs module where an invalid extent length for uncompressed pclusters could lead to a use-after-free observed by syzkaller. The issue is due to insufficient validation of the extent length; the first inlined-pcluster issue (m_pa == 0) has been addressed ...

Linux Distros Unpatched Vulnerability : CVE-2022-50746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: validate the extent length for uncompressed pclusters syzkaller reported a KASAN use-after-free:...