# CVE-2022-48877: linux: In the Linux kernel, the following vulnerability has been resolved:  f2fs: let's avoid panic if extent_tree is not cr...

CVE-2022-48877 is fixed in linux on 1 platform, first by DEBIAN-CVE-2022-48877, released August 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2022-48877
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: n/a
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 21, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  f2fs: let's avoid panic if extent_tree is not created  This patch avoids the below panic.  pc : __lookup_extent_tree+0xd8/0x760 lr : f2fs_do_write_data_page+0x104/0x87c sp : ffffffc010cbb3c0 x29: ffffffc010cbb3e0 x28: 0000000000000000 x27: ffffff8803e7f020 x26: ffffff8803e7ed40 x25: ffffff8803e7f020 x24: ffffffc010cbb460 x23: ffffffc010cbb480 x22: 0000000000000000 x21: 0000000000000000 x20: ffffffff22e90900 x19: 0000000000000000 x18: ffffffc010c5d080 x17: 0000000000000000 x16: 0000000000000020 x15: ffffffdb1acdbb88 x14: ffffff888759e2b0 x13: 0000000000000000 x12: ffffff802da49000 x11: 000000000a001200 x10: ffffff8803e7ed40 x9 : ffffff8023195800 x8 : ffffff802da49078 x7 : 0000000000000001 x6 : 0000000000000000 x5 : 0000000000000006 x4 : ffffffc010cbba28 x3 : 0000000000000000 x2 : ffffffc010cbb480 x1 : 0000000000000000 x0 : ffffff8803e7ed40 Call trace:  __lookup_extent_tree+0xd8/0x760  f2fs_do_write_data_page+0x104/0x87c  f2fs_write_single_data_page+0x420/0xb60  f2fs_write_cache_pages+0x418/0xb1c  __f2fs_write_data_pages+0x428/0x58c  f2fs_write_data_pages+0x30/0x40  do_writepages+0x88/0x190  __writeback_single_inode+0x48/0x448  writeback_sb_inodes+0x468/0x9e8  __writeback_inodes_wb+0xb8/0x2a4  wb_writeback+0x33c/0x740  wb_do_writeback+0x2b4/0x400  wb_workfn+0xe4/0x34c  process_one_work+0x24c/0x5bc  worker_thread+0x3e8/0xa50  kthread+0x150/0x1b4

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 11.6 (bullseye) | 5.10.178-1 | [DEBIAN-CVE-2022-48877](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48877.md) | Aug 21, 2024 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.8-1 | [DEBIAN-CVE-2022-48877](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48877.md) | Aug 21, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.1.8-1 | [DEBIAN-CVE-2022-48877](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48877.md) | Aug 21, 2024 |
| Linux | linux Debian 14 | 6.1.8-1 | [DEBIAN-CVE-2022-48877](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48877.md) | Aug 21, 2024 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.