CIFS Vulnerability in Linux Kernel Affecting File System Operations

CVE-2022-50351

What is CVE-2022-50351?

A vulnerability exists in the CIFS implementation within the Linux kernel, where an xid (transaction ID) leak may occur during the creation of CIFS file structures when the cifs subsystem is already shut down. This leak can happen if the xid is not properly freed before returning control, potentially leading to resource management issues. The issue has been addressed in the latest versions of the Linux kernel, ensuring that xid values are correctly managed even in scenarios where CIFS operations are interrupted.

References