Linux Kernel Vulnerability in Skmsg Functionality

CVE-2022-50363

What is CVE-2022-50363?

A vulnerability in the Linux kernel related to the skmsg functionality has been identified, specifically concerning the alloc_sk_msg() function. This issue arises when alloc_sk_msg() is invoked from a non-sleepable context, leading to a risk of instability. Proper handling requires callers to pass a gfp_t argument to ensure memory allocation functions are contextually appropriate, thereby preventing potential deadlocks or system crashes. Reports indicate that the bug can lead to unexpected behavior during kernel operations, primarily impacting systems relying on specific networking features.

References