CVE-2022-50451

fs/ntfs3: Fix memory leak on ntfs_fill_super() error path

State
Published
Severity
Not scored
Published
Oct 1, 2025
Updated
Aug 15, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix memory leak on ntfs_fill_super() error path

syzbot reported kmemleak as below:

BUG: memory leak unreferenced object 0xffff8880122f1540 (size 32): comm "a.out", pid 6664, jiffies 4294939771 (age 25.500s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 ed ff ed ff 00 00 00 00 ................ backtrace: [<ffffffff81b16052>] ntfs_init_fs_context+0x22/0x1c0 [<ffffffff8164aaa7>] alloc_fs_context+0x217/0x430 [<ffffffff81626dd4>] path_mount+0x704/0x1080 [<ffffffff81627e7c>] __x64_sys_mount+0x18c/0x1d0 [<ffffffff84593e14>] do_syscall_64+0x34/0xb0 [<ffffffff84600087>] entry_SYSCALL_64_after_hwframe+0x63/0xcd

This patch fixes this issue by freeing mount options on error path of ntfs_fill_super().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 78e4aebc35b3e4494a96ffe7534db7201aba869f to before 2dd9ccfb06bcdad30ad92d96c3affa38a458679eAffected
  • cd39981fb92adf0cc736112f87e3e61602baa415 to before ff0df7d9cdbb12878155168b5234e99029e5377fAffected
  • cd39981fb92adf0cc736112f87e3e61602baa415 to before 2600c80ea7b39f987c3fa89287e73d62e322bbbdAffected
  • cd39981fb92adf0cc736112f87e3e61602baa415 to before 51e76a232f8c037f1d9e9922edc25b003d5f3414Affected
  • 0fd64f062c8d1793d8d6d39fa3a4468e39880f90Affected
  • 5.15.63 to before 5.15.87Affected
  • 5.19.4 to before 5.20Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 5.15.87 through 5.15.*Not affected
  • 6.0.17 through 6.0.*Not affected
  • 6.1.3 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.