CVE-2022-50569: xfrm: Update ipcomp_scratches with NULL when freed
In the Linux kernel, the following vulnerability has been resolved:
xfrm: Update ipcompscratches with NULL when freed
Currently if ipcompallocscratches() fails to allocate memory ipcompscratches holds obsolete address. So when we try to free the percpu scratches using ipcompfreescratches() it tries to vfree non existent vm area. Described below:
static void percpu ipcompallocscratches(void) { ... scratches = allocpercpu(void ); if (!scratches) return NULL; ipcompscratches does not know about this allocation failure. Therefore holding the old obsolete address. ... }
So when we free,
static void ipcompfreescratches(void) { ... scratches = ipcompscratches; Assigning obsolete address from ipcompscratches
if (!scratches) return;
foreachpossiblecpu(i) vfree(percpuptr(scratches, i)); Trying to free non existent page, causing warning: trying to vfree existent vm area. ... }
Fix this breakage by updating ipcompscrtches with NULL when scratches is freed
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50569?
CVE-2022-50569 has been assigned a severity rating that reflects its impact on system stability and security in the Linux kernel.
How do I fix CVE-2022-50569?
To fix CVE-2022-50569, apply the latest security patches or updates provided by your Linux distribution.
Which versions of the Linux kernel are affected by CVE-2022-50569?
CVE-2022-50569 affects specific versions of the Linux kernel identified by the updates that address the vulnerability.
What kind of vulnerability is CVE-2022-50569?
CVE-2022-50569 is a memory allocation vulnerability in the Linux kernel related to improper handling of memory allocation failures.
Who is responsible for addressing CVE-2022-50569?
The Linux Foundation and its maintainers are responsible for addressing and patching CVE-2022-50569 in the Linux kernel.