CVE-2022-50451: fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix memory leak on ntfsfillsuper() error path
syzbot reported kmemleak as below:
BUG: memory leak unreferenced object 0xffff8880122f1540 (size 32): comm "a.out", pid 6664, jiffies 4294939771 (age 25.500s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 ed ff ed ff 00 00 00 00 ................ backtrace: [<ffffffff81b16052>] ntfsinitfscontext+0x22/0x1c0 [<ffffffff8164aaa7>] allocfscontext+0x217/0x430 [<ffffffff81626dd4>] pathmount+0x704/0x1080 [<ffffffff81627e7c>] x64sysmount+0x18c/0x1d0 [<ffffffff84593e14>] dosyscall64+0x34/0xb0 [<ffffffff84600087>] entrySYSCALL64afterhwframe+0x63/0xcd
This patch fixes this issue by freeing mount options on error path of ntfsfillsuper().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50451?
CVE-2022-50451 is classified as a memory leak vulnerability in the Linux kernel that could lead to resource exhaustion.
How do I fix CVE-2022-50451?
To fix CVE-2022-50451, patch your Linux kernel to the latest stable version where this vulnerability has been resolved.
What systems are affected by CVE-2022-50451?
CVE-2022-50451 impacts systems that utilize the Linux kernel, particularly those using the NTFS3 filesystem.
What are the consequences of exploiting CVE-2022-50451?
Exploiting CVE-2022-50451 could lead to a memory leak, potentially resulting in degraded system performance or crashes.
When was CVE-2022-50451 reported?
CVE-2022-50451 was reported as a memory leak issue in the Linux kernel that needed resolution for system reliability.