CVE-2022-50455

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

In the Linux kernel, the following vulnerability has been resolved:

nfs: fix possible null-ptr-deref when parsing param

According to commit "vfs: parse: deal with zero length string value", kernel will set the param->string to null pointer in vfs_parse_fs_string() if fs string has zero length.

Yet the problem is that, nfs_fs_context_parse_param() will dereferences the param->string, without checking whether it is a null pointer, which may trigger a null-ptr-deref bug.

This patch solves it by adding sanity check on param->string in nfs_fs_context_parse_param().

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

• nfs: fix possible null-ptr-deref when parsing param {CVE-2022-50455}
• KVM: arm64: Disassociate vcpus from redistributor region on teardown {CVE-2024-40989}
• HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
• ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
• tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg {CVE-2024-56633}
• ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
• ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() {CVE-2023-53483}
• crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
• KVM: nSVM: Check instead of asserting on nested TSC scaling support {CVE-2023-53663}
• ice: Don't tx before switchdev is fully configured {CVE-2023-53657}
• rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed {CVE-2023-53655}
• mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() {CVE-2023-53623}
• ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50485}
• ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode {CVE-2022-50485}
• ext4: add helper to check quota inums {CVE-2022-50485}
• ext4: fix bug_on in __es_tree_search caused by bad quota inode {CVE-2022-50485}
• swiotlb: Fix double-allocation of slots due to broken alignment handling {CVE-2024-35814}
• swiotlb: fix a braino in the alignment check fix {CVE-2024-35814}
• swiotlb: fix slot alignment checks {CVE-2024-35814}
• swiotlb: fix the deadlock in swiotlb_do_find_slots
• drm/radeon: free iio for atombios when driver shutdown {CVE-2023-53453}

In the Linux kernel, the following vulnerability has been resolved: nfs: fix possible null-ptr-deref when parsing param According to commit "vfs: parse: deal with zero length string value", kernel will set the param->string to null pointer in vfs_parse_fs_string() if fs string has zero length. Yet the problem is that, nfs_fs_context_parse_param() will dereferences the param->string, without checking whether it is a null pointer, which may trigger a null-ptr-deref bug. This patch solves it by adding sanity check on param->string in nfs_fs_context_parse_param().

Root has patched CVE-2022-50455 in the linux package for Root:Debian:11. Multiple fixed versions available.

Root has patched CVE-2022-50455 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.