CVE-2022-50553: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...

The vulnerability of the `trace_action_create()` function in the kernel/trace/trace_events_hist.c module, which supports Linux operating system kernel tracing, allows a hacker to cause a service failure.

The vulnerability of the traceactioncreate function in the kernel/trace/traceeventshist.c module, which supports kernel tracing in Linux operating systems, is related to improper memory release before deleting the last reference a “memory leak”. Exploiting this vulnerability could allow an attack...