Memory Leak in Fast-Commit Journal of Linux Kernel

CVE-2022-50465

What is CVE-2022-50465?

A vulnerability exists within the fast-commit journal of the Linux kernel, where uninitialized memory could potentially be leaked to disk. This occurs when unused space in fast-commit journal blocks is not zeroed out, leading to unintentional exposure of sensitive memory data. The issue has been resolved by ensuring that the memory is properly cleared before being written, thereby enhancing data security and integrity.

References