Critical NULL Dereference Vulnerability in Linux Kernel NTFS3 Package
Summary
CVE-2022-50057: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr If ntfs_fill_super() wasn't called then sbi->sb will be equal to NULL. Affects linux versions < 6.0.2-1. Fixed in 6.0.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of Linux operating systems, managing hardware and system resources. The NTFS3 package allows Linux systems to read and write to NTFS file systems, commonly used by Windows. This package is essential for interoperability between Linux and Windows environments. However, it is susceptible to a critical vulnerability that can lead to system crashes.
Vulnerability Detail
The vulnerability, identified as CVE-2022-50057, arises from a NULL pointer dereference in the NTFS3 file system implementation. If the function ntfs_fill_super() is not called, the pointer sbi->sb becomes NULL, leading to potential crashes when the code attempts to dereference this pointer. This issue was triggered by incorrect mount parameters, resulting in a general protection fault. The vulnerability can be exploited to cause system instability and crashes, particularly in environments where NTFS file systems are mounted incorrectly.
How To Fix
Minimum fixed version
6.0.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, ensuring that NTFS file systems are mounted with correct parameters can help prevent triggering the issue.
Conclusion
CVE-2022-50057 is a critical vulnerability in the Linux kernel's NTFS3 package that can lead to system crashes due to a NULL pointer dereference. Users are advised to update their Linux packages to the latest version to mitigate this risk. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
CVE-2022-50057 is a vulnerability in the Linux kernel's NTFS3 package that can lead to a NULL pointer dereference, causing system crashes.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
Exploitation of this vulnerability can lead to system instability, crashes, and potential data loss, particularly in environments using NTFS file systems.
Yes, a patch is available in version 6.0.2-1 of the Linux package. Updating to this version will resolve the vulnerability.
While there are no specific workarounds, ensure that NTFS file systems are mounted with correct parameters to minimize the risk of triggering the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
