Uninitialized Memory Usage in Linux Kernel 9p Client Implementation

CVE-2022-50335

What is CVE-2022-50335?

In the Linux kernel's 9p client, a vulnerability exists where newly allocated requests may be added to an identifier registry without proper initialization. This can lead to the utilization of uninitialized memory if a response is received before the request's reference count is established. Such exploitation may result in corrupted memory and improper request handling, leading to potential system instability or unauthorized access. To mitigate this issue, patches were implemented to ensure that reference counts are initialized to zero before allocation.

References