BaseFortify

Publication date: 2025-12-30

Last updated on: 2025-12-31

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will be NULL, and strcmp() will cause null pointer dereference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-30

Last Modified

2025-12-31

Generated

2026-07-06

AI Q&A

2025-12-30

EPSS Evaluated

2026-07-05

NVD

CVE-2022-50875

EUVD

EUVD-2022-55921

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel occurs in the overlay filesystem code where a null pointer dereference can happen. Specifically, when the kernel's memory allocation function kmalloc() fails during a kasprintf() call, certain function pointers (fn_1 or fn_2) become NULL. Subsequently, a strcmp() call attempts to use these NULL pointers, causing a null pointer dereference and potentially leading to a kernel crash.

Impact Analysis

The vulnerability can cause the Linux kernel to crash due to a null pointer dereference, which may lead to a denial of service (system instability or reboot). This can disrupt normal operations on systems using the affected overlay filesystem.

Hi! I’m here to help you understand CVE-2022-50875. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70