CVE-2022-50451CWE-401

CVE-2022-50451

Medium · published October 1, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix memory leak on ntfs_fill_super() error path

syzbot reported kmemleak as below:

BUG: memory leak

unreferenced object 0xffff8880122f1540 (size 32):

comm "a.out", pid 6664, jiffies 4294939771 (age 25.500s)

hex dump (first 32 bytes):

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

00 00 00 00 00 00 00 00 ed ff ed ff 00 00 00 00 ................

backtrace:

[<ffffffff81b16052>] ntfs_init_fs_context+0x22/0x1c0

[<ffffffff8164aaa7>] alloc_fs_context+0x217/0x430

[<ffffffff81626dd4>] path_mount+0x704/0x1080

[<ffffffff81627e7c>] __x64_sys_mount+0x18c/0x1d0

[<ffffffff84593e14>] do_syscall_64+0x34/0xb0

[<ffffffff84600087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

This patch fixes this issue by freeing mount options on error path of

ntfs_fill_super().

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2025-10-01T16:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15, < 5.15.875.15.87
linux/linux_kernel≥ 5.16, < 6.0.176.0.17
linux/linux_kernel≥ 6.1, < 6.1.36.1.3
References (4)
EPSS history
Timeline
  • 01 OCT 11:45Z
    fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
    cvelistv5