CVE-2022-50380: mm: /proc/pid/smaps_rollup: fix no vma's null-deref
In the Linux kernel, the following vulnerability has been resolved:
mm: /proc/pid/smapsrollup: fix no vma's null-deref
Commit 258f669e7e88 ("mm: /proc/pid/smapsrollup: convert to single value seqfile") introduced a null-deref if there are no vma's in the task in showsmapsrollup.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50380?
CVE-2022-50380 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50380?
To fix CVE-2022-50380, you should update your Linux kernel to the patched version that addresses this vulnerability.
What does CVE-2022-50380 affect?
CVE-2022-50380 affects the Linux kernel specifically related to the /proc/pid/smaps_rollup functionality.
What type of vulnerability is CVE-2022-50380?
CVE-2022-50380 is a null dereference vulnerability that can occur when there are no virtual memory areas (vmAs) in a task.
Is CVE-2022-50380 exploitable?
CVE-2022-50380 may be exploitable under certain conditions where an attacker can manipulate the affected functionality.