CVE-2022-50148

kernfs: fix potential NULL dereference in __kernfs_remove

Description

In the Linux kernel, the following vulnerability has been resolved: kernfs: fix potential NULL dereference in __kernfs_remove When lockdep is enabled, lockdep_assert_held_write would cause potential NULL pointer dereference. Fix the following smatch warnings: fs/kernfs/dir.c:1353 __kernfs_remove() warn: variable dereferenced before check 'kn' (see line 1346)

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/b871986d9d3071f5082664ac274d93f08db257cd
https://git.kernel.org/stable/c/4a9f35b8729c5bf13ea671c908c17ed74c48fc50
https://git.kernel.org/stable/c/72b5d5aef246a0387cefa23121dd90901c7a691a

Frequently Asked Questions

What is the severity of CVE-2022-50148?: CVE-2022-50148 has not yet been assigned a CVSS score.
How to fix CVE-2022-50148?: To fix CVE-2022-50148, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2022-50148 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2022-50148 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2022-50148?: CVE-2022-50148 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.