CVE-2022-50451
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/10/2025
Last modified:
16/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
fs/ntfs3: Fix memory leak on ntfs_fill_super() error path<br />
<br />
syzbot reported kmemleak as below:<br />
<br />
BUG: memory leak<br />
unreferenced object 0xffff8880122f1540 (size 32):<br />
comm "a.out", pid 6664, jiffies 4294939771 (age 25.500s)<br />
hex dump (first 32 bytes):<br />
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br />
00 00 00 00 00 00 00 00 ed ff ed ff 00 00 00 00 ................<br />
backtrace:<br />
[] ntfs_init_fs_context+0x22/0x1c0<br />
[] alloc_fs_context+0x217/0x430<br />
[] path_mount+0x704/0x1080<br />
[] __x64_sys_mount+0x18c/0x1d0<br />
[] do_syscall_64+0x34/0xb0<br />
[] entry_SYSCALL_64_after_hwframe+0x63/0xcd<br />
<br />
This patch fixes this issue by freeing mount options on error path of<br />
ntfs_fill_super().
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.15 (including) | 5.15.87 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 6.0.17 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.1 (including) | 6.1.3 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



