{"cve":"CVE-2022-50839","nvd":{"published":"2025-12-30T13:15:58.463","modified":"2026-06-17T05:24:16.547","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\njbd2: fix potential buffer head reference count leak\n\nAs in 'jbd2_fc_wait_bufs' if buffer isn't uptodate, will return -EIO without\nupdate 'journal->j_fc_off'. But 'jbd2_fc_release_bufs' will release buffer head\nfrom ‘j_fc_off - 1’ if 'bh' is NULL will terminal release which will lead to\nbuffer head buffer head reference count leak.\nTo solve above issue, update 'journal->j_fc_off' before return -EIO.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/68ed9c76b2affd47177b92495446abb7262d0ef7","https://git.kernel.org/stable/c/7a33dde572fceb45d02d188e0213c47059401c93","https://git.kernel.org/stable/c/9b073d73725366d886b711b74e058c02f51e7a0e","https://git.kernel.org/stable/c/e0d5fc7a6d80ac2406c7dfc6bb625201d0250a8a","https://git.kernel.org/stable/c/e7385c868ee038d6a0cb0e85c22d2741e7910fd5"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:18:08.089039631+00:00"},"epss":{"cve":"CVE-2022-50839","score":0.00245,"percentile":0.15798,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}