Null Pointer Dereference in Linux Kernel Ext4 Filesystem

CVE-2022-50344

What is CVE-2022-50344?

A null pointer dereference vulnerability exists in the Linux kernel's ext4 filesystem. This issue can occur during the filesystem sync operation, particularly when managing quota writebacks. A NULL pointer is set incorrectly during the cleanup process, potentially leading to system instability or crashes. The vulnerability has been addressed by modifying the way the ext4 subsystem manages journal starts, ensuring that this pointer dereference does not occur. Users running susceptible versions of the kernel are advised to update to versions that incorporate the fix to maintain system integrity.

References