Memory Leak in CIFS Implementation of Linux Kernel

CVE-2022-50372

What is CVE-2022-50372?

A memory leak vulnerability in the CIFS (Common Internet File System) implementation of the Linux kernel occurs when the ntlmssp negotiate blob fails during the mounting process. This flaw leads to unreferenced objects remaining allocated in memory, which can degrade system performance over time. Proper handling of session setup requests is essential to prevent memory leaks in such scenarios.

References