CVEvulnerability
CVE-2022-50451
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-10-01
- Last modified
- 2026-08-15
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-401
Description
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
syzbot reported kmemleak as below:
BUG: memory leak
unreferenced object 0xffff8880122f1540 (size 32):
comm "a.out", pid 6664, jiffies 4294939771 (age 25.500s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 ed ff ed ff 00 00 00 00 ................
backtrace:
[<ffffffff81b16052>] ntfs_init_fs_context+0x22/0x1c0
[<ffffffff8164aaa7>] alloc_fs_context+0x217/0x430
[<ffffffff81626dd4>] path_mount+0x704/0x1080
[<ffffffff81627e7c>] __x64_sys_mount+0x18c/0x1d0
[<ffffffff84593e14>] do_syscall_64+0x34/0xb0
[<ffffffff84600087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd
This patch fixes this issue by freeing mount options on error path of
ntfs_fill_super().
Affected configurations
• linux linux kernel (>= 5.15 < 5.15.87)
• linux linux kernel (>= 5.16 < 6.0.17)
• linux linux kernel (>= 6.1 < 6.1.3)
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- https://git.kernel.org/stable/c/2600c80ea7b39f987c3fa89287e73d62e322bbbd Patch
- https://git.kernel.org/stable/c/2dd9ccfb06bcdad30ad92d96c3affa38a458679e Patch
- https://git.kernel.org/stable/c/51e76a232f8c037f1d9e9922edc25b003d5f3414 Patch
- https://git.kernel.org/stable/c/ff0df7d9cdbb12878155168b5234e99029e5377f Patch