Null Pointer Dereference Vulnerability in Linux Kernel F2FS

CVE-2022-50620

What is CVE-2022-50620?

A null pointer dereference vulnerability was identified in the f2fs_start_discard_thread function of the Linux kernel's F2FS file system. The flaw occurs due to a failure to invalidate the dcc->f2fs_issue_discard pointer in the error handling path. As a result, when the kthread_stop function is called, it may attempt to access this invalid pointer, leading to potential system instability or crashes. This vulnerability highlights the importance of proper error handling in kernel functions to prevent unintended accesses to memory and ensure overall system reliability.

References