{
  "cveId": "CVE-2022-48877",
  "url": "https://patchblox.com/security/cve/CVE-2022-48877",
  "summary": "CVE-2022-48877 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48877, released August 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  f2fs: let\u0027s avoid panic if extent_tree is not cr...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  f2fs: let\u0027s avoid panic if extent_tree is not created  This patch avoids the below panic.  pc : __lookup_extent_tree\u002B0xd8/0x760 lr : f2fs_do_write_data_page\u002B0x104/0x87c sp : ffffffc010cbb3c0 x29: ffffffc010cbb3e0 x28: 0000000000000000 x27: ffffff8803e7f020 x26: ffffff8803e7ed40 x25: ffffff8803e7f020 x24: ffffffc010cbb460 x23: ffffffc010cbb480 x22: 0000000000000000 x21: 0000000000000000 x20: ffffffff22e90900 x19: 0000000000000000 x18: ffffffc010c5d080 x17: 0000000000000000 x16: 0000000000000020 x15: ffffffdb1acdbb88 x14: ffffff888759e2b0 x13: 0000000000000000 x12: ffffff802da49000 x11: 000000000a001200 x10: ffffff8803e7ed40 x9 : ffffff8023195800 x8 : ffffff802da49078 x7 : 0000000000000001 x6 : 0000000000000000 x5 : 0000000000000006 x4 : ffffffc010cbba28 x3 : 0000000000000000 x2 : ffffffc010cbb480 x1 : 0000000000000000 x0 : ffffff8803e7ed40 Call trace:  __lookup_extent_tree\u002B0xd8/0x760  f2fs_do_write_data_page\u002B0x104/0x87c  f2fs_write_single_data_page\u002B0x420/0xb60  f2fs_write_cache_pages\u002B0x418/0xb1c  __f2fs_write_data_pages\u002B0x428/0x58c  f2fs_write_data_pages\u002B0x30/0x40  do_writepages\u002B0x88/0x190  __writeback_single_inode\u002B0x48/0x448  writeback_sb_inodes\u002B0x468/0x9e8  __writeback_inodes_wb\u002B0xb8/0x2a4  wb_writeback\u002B0x33c/0x740  wb_do_writeback\u002B0x2b4/0x400  wb_workfn\u002B0xe4/0x34c  process_one_work\u002B0x24c/0x5bc  worker_thread\u002B0x3e8/0xa50  kthread\u002B0x150/0x1b4",
  "published": "2024-08-21T07:15:04Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "5.10.178-1",
      "fix": "DEBIAN-CVE-2022-48877",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48877",
      "released": "2024-08-21T07:15:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.8-1",
      "fix": "DEBIAN-CVE-2022-48877",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48877",
      "released": "2024-08-21T07:15:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.8-1",
      "fix": "DEBIAN-CVE-2022-48877",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48877",
      "released": "2024-08-21T07:15:04Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.8-1",
      "fix": "DEBIAN-CVE-2022-48877",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-48877",
      "released": "2024-08-21T07:15:04Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}