CVE-2022-49567

The CVE-2022-49567 issue is a Linux kernel vulnerability in mm/mempolicy where uninitialized nodemask data can be accessed when policy mode is MPOL_LOCAL, leading to potential read of pol->w.cpuset_mems_allowed during mpol_rebind_policy. The root cause is that mpol_set_nodemask() does not init...