In the Linux kernel, the following vulnerability has been resolved: erofs: validate the extent length for uncompressed pclusters syzkaller reported a KASAN use-after-free: https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2 The referenced fuzzed image actually has two issues: - m_pa == 0 as a non-inlined pcluster; - The logical length is longer than its physical length. The first issue has already been addressed. This patch addresses the second issue by checking the extent length validity.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - erofs: validate the extent length for uncompressed pclusters syzkaller reported a KASAN use-after-free:
    https://syzkaller.appspot.com/bug?extid=2ae90e873e97f1faf6f2 The referenced fuzzed image actually has two     issues: - m_pa == 0 as a non-inlined pcluster; - The logical length is longer than its physical length.
    The first issue has already been addressed. This patch addresses the second issue by checking the extent     length validity. (CVE-2022-50746)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
301628	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1280)	Nessus	Huawei Local Security Checks	high
301595	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1244)	Nessus	Huawei Local Security Checks	high
279811	Linux Distros Unpatched Vulnerability : CVE-2022-50746	Nessus	Misc.	high

Detections

Analytics

CVE-2022-50746

high

Tenable Plugins

high

high

high