CVE-2022-50270
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/09/2025
Last modified:
15/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
f2fs: fix the assign logic of iocb<br />
<br />
commit 18ae8d12991b ("f2fs: show more DIO information in tracepoint")<br />
introduces iocb field in &#39;f2fs_direct_IO_enter&#39; trace event<br />
And it only assigns the pointer and later it accesses its field<br />
in trace print log.<br />
<br />
Unable to handle kernel paging request at virtual address ffffffc04cef3d30<br />
Mem abort info:<br />
ESR = 0x96000007<br />
EC = 0x25: DABT (current EL), IL = 32 bits<br />
<br />
pc : trace_raw_output_f2fs_direct_IO_enter+0x54/0xa4<br />
lr : trace_raw_output_f2fs_direct_IO_enter+0x2c/0xa4<br />
sp : ffffffc0443cbbd0<br />
x29: ffffffc0443cbbf0 x28: ffffff8935b120d0 x27: ffffff8935b12108<br />
x26: ffffff8935b120f0 x25: ffffff8935b12100 x24: ffffff8935b110c0<br />
x23: ffffff8935b10000 x22: ffffff88859a936c x21: ffffff88859a936c<br />
x20: ffffff8935b110c0 x19: ffffff8935b10000 x18: ffffffc03b195060<br />
x17: ffffff8935b11e76 x16: 00000000000000cc x15: ffffffef855c4f2c<br />
x14: 0000000000000001 x13: 000000000000004e x12: ffff0000ffffff00<br />
x11: ffffffef86c350d0 x10: 00000000000010c0 x9 : 000000000fe0002c<br />
x8 : ffffffc04cef3d28 x7 : 7f7f7f7f7f7f7f7f x6 : 0000000002000000<br />
x5 : ffffff8935b11e9a x4 : 0000000000006250 x3 : ffff0a00ffffff04<br />
x2 : 0000000000000002 x1 : ffffffef86a0a31f x0 : ffffff8935b10000<br />
Call trace:<br />
trace_raw_output_f2fs_direct_IO_enter+0x54/0xa4<br />
print_trace_fmt+0x9c/0x138<br />
print_trace_line+0x154/0x254<br />
tracing_read_pipe+0x21c/0x380<br />
vfs_read+0x108/0x3ac<br />
ksys_read+0x7c/0xec<br />
__arm64_sys_read+0x20/0x30<br />
invoke_syscall+0x60/0x150<br />
el0_svc_common.llvm.1237943816091755067+0xb8/0xf8<br />
do_el0_svc+0x28/0xa0<br />
<br />
Fix it by copying the required variables for printing and while at<br />
it fix the similar issue at some other places in the same file.



