fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
Summary
| CVE | CVE-2022-50451 |
|---|---|
| State | PUBLISHED |
| Assigner | Linux |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-10-01 12:15:38 UTC |
| Updated | 2026-08-15 13:17:38 UTC |
| Description | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak on ntfs_fill_super() error path syzbot reported kmemleak as below: BUG: memory leak unreferenced object 0xffff8880122f1540 (size 32): comm "a.out", pid 6664, jiffies 4294939771 (age 25.500s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 ed ff ed ff 00 00 00 00 ................ backtrace: [<ffffffff81b16052>] ntfs_init_fs_context+0x22/0x1c0 [<ffffffff8164aaa7>] alloc_fs_context+0x217/0x430 [<ffffffff81626dd4>] path_mount+0x704/0x1080 [<ffffffff81627e7c>] __x64_sys_mount+0x18c/0x1d0 [<ffffffff84593e14>] do_syscall_64+0x34/0xb0 [<ffffffff84600087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd This patch fixes this issue by freeing mount options on error path of ntfs_fill_super(). |
Risk And Classification
Primary CVSS: v3.1 5.5 MEDIUM from [email protected]
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Problem Types: CWE-401
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Linux | Linux | affected 78e4aebc35b3e4494a96ffe7534db7201aba869f 2dd9ccfb06bcdad30ad92d96c3affa38a458679e git | Not specified |
| CNA | Linux | Linux | affected cd39981fb92adf0cc736112f87e3e61602baa415 ff0df7d9cdbb12878155168b5234e99029e5377f git | Not specified |
| CNA | Linux | Linux | affected cd39981fb92adf0cc736112f87e3e61602baa415 2600c80ea7b39f987c3fa89287e73d62e322bbbd git | Not specified |
| CNA | Linux | Linux | affected cd39981fb92adf0cc736112f87e3e61602baa415 51e76a232f8c037f1d9e9922edc25b003d5f3414 git | Not specified |
| CNA | Linux | Linux | affected 0fd64f062c8d1793d8d6d39fa3a4468e39880f90 git | Not specified |
| CNA | Linux | Linux | affected 5.15.63 5.15.87 semver | Not specified |
| CNA | Linux | Linux | affected 5.19.4 5.20 semver | Not specified |
| CNA | Linux | Linux | affected 6.0 | Not specified |
| CNA | Linux | Linux | unaffected 6.0 semver | Not specified |
| CNA | Linux | Linux | unaffected 5.15.87 5.15.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.0.17 6.0.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.1.3 6.1.* semver | Not specified |
| CNA | Linux | Linux | unaffected 6.2 * original_commit_for_fix | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| git.kernel.org/stable/c/2dd9ccfb06bcdad30ad92d96c3affa38a458679e | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/51e76a232f8c037f1d9e9922edc25b003d5f3414 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/ff0df7d9cdbb12878155168b5234e99029e5377f | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| git.kernel.org/stable/c/2600c80ea7b39f987c3fa89287e73d62e322bbbd | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | git.kernel.org | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.