CVE-2022-50455

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's NFS implementation where a null pointer dereference can occur during parameter parsing. Specifically, the vfs parse fs string() function may set the param->string to a null pointer if the file system string has zero length. Subsequently, the nfs fs context parse param() function dereferences this pointer without a null check, potentially leading to a crash. The issue is addressed by adding a sanity check on param->string within nfs fs context parse param().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.