Memory Leak in OrangeFS Module of Linux Kernel

CVE-2022-50316

What is CVE-2022-50316?

A memory leak vulnerability exists in the OrangeFS module of the Linux kernel, specifically during the module's initialization and cleanup processes. When the OrangeFS module is inserted or removed, certain kobjects are not properly released. This results in a leak of memory, leading to unreferenced objects persisting in the system, which can degrade system performance over time and may lead to stability issues. Users and administrators of systems utilizing the OrangeFS module should take necessary precautions and apply the appropriate updates to mitigate this vulnerability.

References