Decompression Hang in Linux Kernel's EROFS with Potential Impact

CVE-2022-50193

What is CVE-2022-50193?

A vulnerability in the Linux kernel's EROFS filesystem can lead to a decompression hang when the filesystem is mounted multiple times in quick succession. This occurs due to a race condition between two tasks, where one task attempting to load decompression configuration may block another task that is trying to access decompressed data. As a result, the second task can enter a sleep state, causing the system to freeze for that process until resources are properly managed and released. This condition poses risks for system stability and efficiency, highlighting the importance of timely updates to mitigate such issues.

References