Memory Leak Vulnerability in Linux Kernel NFS Daemon

CVE-2022-50348

What is CVE-2022-50348?

A memory leak vulnerability exists within the NFS daemon (nfsd) of the Linux kernel due to improper error handling in the memdup_user() function. Specifically, when this function call fails, the previously allocated memory is not freed, causing a memory leak. This can lead to increased resource consumption and potentially degrade system performance over time. To mitigate this risk, users are encouraged to apply the latest patches provided in the Linux kernel updates.

References