Memory Leak Vulnerability in Linux Kernel's NTFS3 Filesystem
Summary
CVE-2022-49550: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: provide block_invalidate_folio to fix memory leak The ntfs3 filesystem lacks the 'invalidate_folio' method and it causes memory leak. Affects linux versions < 5.18.5-1. Fixed in 5.18.5-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system resources. The NTFS3 filesystem is an implementation that allows Linux systems to read and write to NTFS partitions, commonly used in Windows environments. This filesystem is designed to handle file operations efficiently, but it has been found to lack a critical method for managing memory, leading to potential memory leaks.
Vulnerability Detail
The vulnerability identified as CVE-2022-49550 arises from the absence of the 'invalidate_folio' method in the NTFS3 filesystem of the Linux kernel. This oversight results in a memory leak when data is written to the filesystem and the filesystem is subsequently unmounted. The cached written data is not freed, causing a permanent memory leak that can degrade system performance and stability over time. This issue is particularly concerning for systems that frequently mount and unmount NTFS partitions.
How To Fix
Minimum fixed version
5.18.5-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid writing to NTFS3 filesystems until the patch is applied. Additionally, if unmounting is necessary, ensure that no write operations are in progress to minimize the risk of memory leaks.
Conclusion
The CVE-2022-49550 vulnerability in the Linux kernel's NTFS3 filesystem poses a significant risk of memory leaks, which can impact system performance. Users are advised to update to the patched version of the kernel to mitigate this issue. Temporary workarounds can help reduce risk until the update is applied.
See every vulnerability recorded for linux →
FAQ
CVE-2022-49550 is a vulnerability in the Linux kernel's NTFS3 filesystem that causes memory leaks due to the lack of an 'invalidate_folio' method.
This vulnerability can lead to memory leaks, which may degrade system performance and stability, especially in environments that frequently mount and unmount NTFS partitions.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Yes, a patch is available in version 5.18.5-1 of the Linux kernel. Users should update to this version or later to mitigate the vulnerability.
If an immediate update is not possible, avoid writing to NTFS3 filesystems and ensure that no write operations are in progress before unmounting to reduce the risk of memory leaks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
