CVE-2022-50668

highpriority · track · 0EPSS 0.008 · 57 %ileDEEU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.81% (57th) EPSS

CVSS 7.5 · high

Is it mine?

28 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cert_bund · suse_csaf

EPSS · scored 2026-10-28

In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock due to mbcache entry corruption When manipulating xattr blocks, we can deadlock infinitely looping inside ext4_xattr_block_set() where we constantly keep finding xattr block for reuse in mbcache but we are unable to reuse it because its reference count is too big. This happens because cache entry for the xattr block is marked as reusable (e_reusable set) although its reference count is too big. When this inconsistency happens, this inconsistent state is kept indefinitely and so ext4_xattr_block_set() keeps retrying indefinitely. The inconsistent state is caused by non-atomic update of e_reusable bit. e_reusable is part of a bitfield and e_reusable update can race with update of e_referenced bit in the same bitfield resulting in loss of one of the updates. Fix the problem by using atomic bitops instead. This bug has been around for many years, but it became *much* easier to hit after commit 65f8b80053a1 ("ext4: fix race when reusing xattr blocks").

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedkernel-devel-rt-0:5.14.21-150500.13.118.1.noarch as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-rt-0:5.14.21-150500.13.118.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-rt-0:5.14.21-150500.13.118.1.noarch as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcluster-md-kmp-default-0:4.12.14-122.290.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcluster-md-kmp-default-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcluster-md-kmp-default-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcluster-md-kmp-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcluster-md-kmp-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddlm-kmp-default-0:4.12.14-122.290.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddlm-kmp-default-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddlm-kmp-default-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddlm-kmp-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddlm-kmp-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgfs2-kmp-default-0:4.12.14-122.290.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgfs2-kmp-default-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgfs2-kmp-default-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgfs2-kmp-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgfs2-kmp-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-0:4.12.14-122.290.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-base-0:4.12.14-122.290.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-base-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-base-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-base-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-base-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-devel-0:4.12.14-122.290.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-devel-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-devel-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-devel-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-devel-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-kgraft-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-kgraft-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-kgraft-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-kgraft-devel-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-kgraft-devel-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-kgraft-devel-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-man-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-devel-0:4.12.14-122.290.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-devel-0:4.12.14-122.290.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-macros-0:4.12.14-122.290.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-macros-0:4.12.14-122.290.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-0:4.12.14-122.290.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-0:4.12.14-122.290.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:4.12.14-122.290.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-syms-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_290-default-0:1-8.7.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_290-default-0:1-8.7.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_290-default-0:1-8.7.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedocfs2-kmp-default-0:4.12.14-122.290.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedocfs2-kmp-default-0:4.12.14-122.290.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedocfs2-kmp-default-0:4.12.14-122.290.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedocfs2-kmp-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSSsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedocfs2-kmp-default-0:4.12.14-122.290.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-rt-0:5.3.18-150300.232.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-rt-0:5.3.18-150300.232.1.noarch as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-0:5.3.18-150300.59.232.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-0:5.3.18-150300.59.232.1.s390x as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-0:5.3.18-150300.59.232.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-base-0:5.3.18-150300.59.232.1.150300.18.138.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-default-base-0:5.3.18-150300.59.232.1.150300.18.138.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-rt-0:5.14.21-150400.15.142.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-rt-0:5.14.21-150400.15.142.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-rt-0:5.14.21-150400.15.142.1.noarch as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-source-rt-0:5.14.21-150400.15.142.1.noarch as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.5–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondaryexploitability 3.9 · impact 3.6

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · SUSE Product Security

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-362USLLM-inferredCWE-667USLLM-inferred

affected products (28)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell Avamarall versionscert_bundDEcpe:/a:dell:avamar:-
Dell NetWorkerall versionscert_bundDEcpe:/a:dell:networker:-
IBM QRadar SIEMall versionscert_bundDEcpe:/a:ibm:qradar_siem:-
Open Source Linux Kernelall versionscert_bundDEcpe:/o:linux:linux_kernel:unspecified
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Linux Linux≤ 4.6enisa_euvdEU
Linux Linuxall versionsenisa_euvdEU
Linux Linux< 4.19.270enisa_euvdEU
Linux Linux< 5.10.163enisa_euvdEU
Linux Linux< 5.15.87enisa_euvdEU
Linux Linux< 5.4.229enisa_euvdEU
Linux Linux< 6.0.18enisa_euvdEU
Linux Linux< 6.1.4enisa_euvdEU

showing 20 of 28

advisories (6)

Vendor and ecosystem advisories describing this.

SUSE-SU-2026:0263-1Security update for the Linux Kernel2026-01-22csaf · suse_csafDE
Security update for the Linux Kernel
SUSE-SU-2026:0316-1Security update for the Linux Kernel2026-01-28csaf · suse_csafDE
Security update for the Linux Kernel
SUSE-SU-2026:0350-1Security update for the Linux Kernel2026-01-30csaf · suse_csafDE
Security update for the Linux Kernel
SUSE-SU-2026:0369-1Security update for the Linux Kernel2026-02-03csaf · suse_csafDE
Security update for the Linux Kernel
SUSE-SU-2026:0411-1Security update for the Linux Kernel2026-02-09csaf · suse_csafDE
Security update for the Linux Kernel
WID-SEC-W-2025-2765Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2025-12-08csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund suse_csaf NVD CVE.org MITRE

published 2025-12-09modified 2026-08-04

references (23)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan