Is CVE-2022-50869 in the CISA KEV catalog?

No. CVE-2022-50869 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the EPSS score for CVE-2022-50869?

CVE-2022-50869 has an EPSS score of 0.17% (6th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2022-50869?

Upgrade linux on debian 12 to 6.1.4-1 or later.

CVE & CISA-KEV Catalog

CVE-2022-50869

UNSCORED

NVD

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds in r_page When PAGE_SIZE is 64K, if read_log_page is called by log_read_rst for the first time, the size of *buffer would be equal to DefaultLogPageSize(4K).But for *buffer operations like memcpy, if the memory area size(n) which being assigned to buffer is larger than 4K (log->page_size(64K) or bytes(64K-page_off)), it will cause an out of boundary error. Call trace: [...] kasan_report+0x44/0x130 check_memory_region+0xf8/0x1a0 memcpy+0xc8/0x100 ntfs_read_run_nb+0x20c/0x460 read_log_page+0xd0/0x1f4 log_read_rst+0x110/0x75c log_replay+0x1e8/0x4aa0 ntfs_loadlog_and_replay+0x290/0x2d0 ntfs_fill_super+0x508/0xec0 get_tree_bdev+0x1fc/0x34c [...] Fix this by setting variable r_page to NULL in log_read_rst.

How to fix

Remediation Available

linuxDebian

Fixed in:6.1.4-1CVE-2022-50869

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3.1 Vector

No CVSS vector data available.

Exploit Intelligence

0.17%probability of exploitation in 30 days

6thpercentile

Low risk: more likely to be exploited than 6% of all known CVEs.

References

Other references4

Embed a live status badge for CVE-2022-50869

Markdown

[![CVE-2022-50869](https://tridentstack.com/cve/badge/CVE-2022-50869.svg)](https://tridentstack.com/cve/CVE-2022-50869)

HTML

<a href="https://tridentstack.com/cve/CVE-2022-50869"><img src="https://tridentstack.com/cve/badge/CVE-2022-50869.svg" alt="CVE-2022-50869"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-12-31.