The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: ext4: don't allow journal inode to     have encrypt flag Mounting a filesystem whose journal inode has the encrypt flag causes a NULL dereference     in fscrypt_limit_io_blocks() when the 'inlinecrypt' mount option is used. The problem is that when     jbd2_journal_init_inode() calls bmap(), it eventually finds its way into ext4_iomap_begin(), which calls     fscrypt_limit_io_blocks(). fscrypt_limit_io_blocks() requires that if the inode is encrypted, then its     encryption key must already be set up. That's not the case here, since the journal inode is never opened     like a normal file would be. Hence the crash. A reproducer is: mkfs.ext4 -F /dev/vdb debugfs -w /dev/vdb
    -R set_inode_field <8> flags 0x80808 mount /dev/vdb /mnt -o inlinecrypt To fix this, make ext4 consider     journal inodes with the encrypt flag to be invalid. (Note, maybe other flags should be rejected on the     journal inode too. For now, this is just the minimal fix for the above issue.) I've marked this as fixing     the commit that introduced the call to fscrypt_limit_io_blocks(), since that's what made an actual crash     start being possible. But this fix could be applied to any version of ext4 that supports the encrypt     feature. (CVE-2022-50277)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2022-50277

medium Nessus Plugin ID 265179

Version 1.5

Version 1.2

Version 1.5 Oct 27, 2025, 6:34 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:U/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:U/RC:C") Detection (updated detection logic) Plugin metadata Plugin Feed: 202510270634
Version 1.2 Sep 20, 2025, 5:27 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202509200527