CVE-2022-50432

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc3-00363-g7726d4c3e60b

Description The Linux kernel contained a use-after-free flaw within the kernfs subsystem, specifically in the kernfs remove function. This issue stemmed from concurrent calls to kernfs remove by name ns() for the same file, triggered by a race condition during kernfs root node freeing within kernfs drain(). The Syzkaller fuzzer identified this condition, which resulted in a KASAN detected use-after-free.

Recommendations Update to a version newer than 6.0.0-rc3-00363-g7726d4c3e60b.