User After Free/General Protection Fault in Linux Kernel Affecting Various Systems

CVE-2022-50367

What is CVE-2022-50367?

In the Linux kernel, an issue in inode management can cause crashes due to uninitialized pointers. This occurs when security_inode_alloc fails in alloc_inode, leading to improper handling of inode->i_private. The flaw triggers nilfs_mdt_destroy on an uninitialized inode, potentially resulting in system instability. A fix has been implemented to ensure security_inode_alloc is executed in a manner that prevents this condition.

References