CVE-2022-50367

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the nilfs mdt destroy function related to uninitialized inode private data. Specifically, if security inode alloc() fails during inode allocation (alloc inode), the inode->i private field remains uninitialized. Subsequently, nilfs is metadata file inode() may incorrectly identify the inode as a metadata file, leading to a call to nilfs free inode() and ultimately nilfs mdt destroy() with the uninitialized inode->i private. This can result in crashes, potentially leading to a Use-After-Free (UAF) or General Protection Fault (GPF).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.