CVE-2022-50864
nilfs2: fix shift-out-of-bounds due to too large exponent of block size
Reported by linux · Published December 30, 2025
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix shift-out-of-bounds due to too large exponent of block size If field s_log_block_size of superblock data is corrupted and too large, init_nilfs() and load_nilfs() still can trigger a shift-out-of-bounds warning followed by a kernel panic (if panic_on_warn is set): shift exponent 38973 is too large for 32-bit type 'int' Call Trace: <TASK> dump_stack_lvl+0xcd/0x134 ubsan_epilogue+0xb/0x50 __ubsan_handle_shift_out_of_bounds.cold.12+0x17b/0x1f5 init_nilfs.cold.11+0x18/0x1d [nilfs2] nilfs_mount+0x9b5/0x12b0 [nilfs2] ... This fixes the issue by adding and using a new helper function for getting block size with sanity check.
EPSS 0.20% · 9.9th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | ddb6615a168f97b91175e00eda4c644741cf531c, a16731fa1b96226c75bbf18e73513b14fc318360, 8b6ef451b5701b37d9a5905534595776a662edfc |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f, 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f, 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f |
| Linux | Linux | 2.6.30, 0, 5.10.163 |
| Linux | Linux | 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f, 6.0.16, 6.1.2 |
| linux | linux_kernel | 2.6.30, 2.6.30, 2.6.30 |
Timeline
- Dec 30, 2025 CVE Published
- Dec 31, 2025 EPSS Score (30 in total, the first dated here)
- Jun 2, 2026 Security Advisory (25 in total, the first dated here)
- Oct 4, 2026 Distribution Patch (24 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2022-50864
vulnetix vdb fixes CVE-2022-50864Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-50864/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart