CVE-2022-0617

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.2-rc1 through 5.17-rc2

Description The issue is related to a null pointer dereference in the Linux kernel's UDF file system functionality. This can be triggered by a local user through the udf file write iter function with a malicious UDF image, potentially allowing an attacker to crash the system.

Recommendations For Linux kernel versions 4.2-rc1 through 5.17-rc2, consider disabling the UDF file system functionality as a temporary workaround until a patch is available. Restrict access to the udf file write iter function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.