Null Pointer Dereference in Linux Kernel Hugetlbfs Component

CVE-2022-50334

What is CVE-2022-50334?

A null pointer dereference vulnerability exists in the hugetlbfs component of the Linux kernel, triggered when parsing illegal mount parameters. The bug arises in the hugetlbfs_parse_param() function, which incorrectly attempts to dereference a parameter string that can be null. This occurs if an improper mount command, such as 'size=,' is issued, leading to unstable kernel behavior. A corrective patch has been introduced to ensure proper checks for null pointers before dereferencing them, improving the reliability of the filesystem.

References