CVE-2022-50372

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists within the CIFS implementation when building the NTLMSSP negotiate blob fails during session setup. Specifically, the session setup request is not freed, leading to a memory leak when mounting CIFS. The issue occurs during the SMB2 sess auth rawntlmssp negotiate function and impacts the allocation of memory via mempool alloc.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.