Memory Leak Vulnerability in Linux Kernel's SMB2 Negotiation Process

CVE-2022-49938

What is CVE-2022-49938?

A memory leak was identified in the Linux kernel's SMB2_negotiate function, where improper error handling in cases of dialect mismatches could prevent the release of response buffers. This issue could lead to exhaustion of memory resources over time, potentially impacting system stability and performance.

References