CVE-2022-49550: fs/ntfs3: provide block_invalidate_folio to fix memory leak

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-02-26 · updated 2026-06-17
Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: provide block_invalidate_folio to fix memory leak The ntfs3 filesystem lacks the 'invalidate_folio' method and it causes memory leak. If you write to the filesystem and then unmount it, the cached written data are not freed and they are permanently leaked.

Affected products

Linux kernel: from 5.18 before 5.18.3 — fixed in 5.18.3

How to fix

Upgrade to a fixed version: Linux kernel 5.18.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/0753245a72ec99824677586499ee2e0919164b3f
https://git.kernel.org/stable/c/724bbe49c5e427cb077357d72d240a649f2e4054

Get alerted when CVE-2022-49550 or the next vulnerability affects your stack