CVE-2022-50380

In the Linux kernel, the following vulnerability has been resolved:

mm: /proc/pid/smaps_rollup: fix no vma's null-deref

Commit 258f669e7e88 ("mm: /proc/pid/smaps_rollup: convert to single value seq_file") introduced a null-deref if there are no vma's in the task in show_smaps_rollup.

The vulnerability is a NULL pointer dereference in show_smaps_rollup() when reading /proc/<pid>/smaps_rollup for a process without any VMAs. It can be triggered locally by an unprivileged user to cause a kernel crash (Denial of Service). No privilege escalation or information disclosure is possible, so the impact is limited to availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.