Kernel Vulnerability in Linux CIFS Affecting Multiple Versions

CVE-2022-50341

What is CVE-2022-50341?

A vulnerability present in the Linux CIFS implementation can result in a kernel memory access error when performing encryption on certain requests. It specifically occurs during operations in Azure environments on ARM64 systems, triggering a fault due to an attempt to write to read-only memory. This issue arises from improper management of memory buffers, where the system tries to access a vmalloc-ed buffer inappropriately. Correcting this will involve ensuring the proper mapping of pages and offsets to avoid this critical memory handling error.

References