PT-2025-40136 · Linux+2 · Linux Kernel+2

Published 2022-09-30 · Updated 2026-03-14 · CVE-2022-50451

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the fs/ntfs3 module, specifically within the ntfs fill super() function. This issue was reported by syzbot, a kernel testing tool, which identified an unreferenced object in memory. The memory leak occurs on the error path during the execution of ntfs fill super(). The patch resolves this by freeing mount options when an error occurs during the ntfs fill super() process. The backtrace includes function calls such as ntfs init fs context(), alloc fs context(), path mount(), and x64 sys mount().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-04088

CVE-2022-50451

Affected Products

Debian

Linux Kernel

Ntfs3

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50451.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50451 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-50451 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50451 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50451 · Vendor Advisory
• https://git.kernel.org/stable/c/51e76a232f8c037f1d9e9922edc25b003d5f3414 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-50451 · Vendor Advisory
• https://git.kernel.org/stable/c/2600c80ea7b39f987c3fa89287e73d62e322bbbd · Patch
• https://git.kernel.org/stable/c/ff0df7d9cdbb12878155168b5234e99029e5377f · Patch
• https://cve.org/CVERecord?id=CVE-2022-50451 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50451 · Security Note
• https://git.kernel.org/stable/c/2dd9ccfb06bcdad30ad92d96c3affa38a458679e · Patch
• https://bdu.fstec.ru/vul/2026-04088 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50451 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note