CVE-2022-50875: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
In the Linux kernel, the following vulnerability has been resolved:
of: overlay: fix null pointer dereferencing in finddupcsetnodeentry() and finddupcsetprop()
When kmalloc() fail to allocate memory in kasprintf(), fn1 or fn2 will be NULL, and strcmp() will cause null pointer dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50875?
CVE-2022-50875 has a moderate severity rating due to potential null pointer dereferencing leading to application crashes.
How can I fix CVE-2022-50875?
To fix CVE-2022-50875, ensure you update your Linux kernel to the latest version that has addressed this vulnerability.
What systems are affected by CVE-2022-50875?
CVE-2022-50875 affects systems running specific versions of the Linux kernel that are vulnerable to memory allocation failures.
Is there a workaround for CVE-2022-50875?
There is no effective workaround for CVE-2022-50875; applying the recommended kernel updates is the best option.
How was CVE-2022-50875 discovered?
CVE-2022-50875 was discovered during code audits related to memory management in the Linux kernel.