CVE-2022-49739

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/03/2025
Last modified:
28/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> gfs2: Always check inode size of inline inodes<br /> <br /> Check if the inode size of stuffed (inline) inodes is within the allowed<br /> range when reading inodes from disk (gfs2_dinode_in()). This prevents<br /> us from on-disk corruption.<br /> <br /> The two checks in stuffed_readpage() and gfs2_unstuffer_page() that just<br /> truncate inline data to the maximum allowed size don&amp;#39;t actually make<br /> sense, and they can be removed now as well.

Impact