Null Pointer Dereference in Linux Kernel's VKMS Component

CVE-2022-50369

What is CVE-2022-50369?

A vulnerability exists in the Linux kernel's VKMS (Virtual Kernel Mode Setting) component, which can cause a null pointer dereference when attempting to destroy the workqueue associated with VKMS. This issue arises during the resource release process, particularly when an Out of Memory (OOM) condition occurs, leading to a scenario where the workqueue has not been allocated prior to its deallocation attempt. The issue can be mitigated by implementing a check to ensure the workqueue pointer is not NULL before invoking the destroy function.

References