Linux Distros Unpatched Vulnerability : CVE-2022-50875

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - of: overlay: fix null pointer dereferencing in finddupcsetnodeentry and finddupcsetprop When kmalloc fail to allocate memory in kasprintf, fn1 or fn2 will be...

CVE-2022-50875

CVE-2022-50875 — Linux kernel (overlay): The issue is a null pointer dereference in overlay code, specifically in find_dup_cset_node_entry() and find_dup_cset_prop(). If kmalloc() fails during kasprintf(), fn_1 or fn_2 may be NULL, and a subsequent strcmp() can dereference NULL. The vulnerability...