In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr If ntfs_fill_super() wasn't called then sbi->sb will be equal to NULL. Code should check this ptr before dereferencing. Syzbot hit this issue via passing wrong mount param as can be seen from log below Fail log: ntfs3: Unknown parameter 'iochvrset' general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] CPU: 1 PID: 3589 Comm: syz-executor210 Not tainted 5.18.0-rc3-syzkaller-00016-gb253435746d9 #0 ... Call Trace: <TASK> put_ntfs+0x1ed/0x2a0 fs/ntfs3/super.c:463 ntfs_fs_free+0x6a/0xe0 fs/ntfs3/super.c:1363 put_fs_context+0x119/0x7a0 fs/fs_context.c:469 do_new_mount+0x2b4/0xad0 fs/namespace.c:3044 do_mount fs/namespace.c:3383 [inline] __do_sys_mount fs/namespace.c:3591 [inline]

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131747 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr

    If ntfs_fill_super() wasn't called then sbi->sb will be equal to NULL.
    Code should check this ptr before dereferencing. Syzbot hit this issue     via passing wrong mount param as can be seen from log below

    Fail log:
    ntfs3: Unknown parameter 'iochvrset'     general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP     KASAN     KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]     CPU: 1 PID: 3589 Comm: syz-executor210 Not tainted 5.18.0-rc3-syzkaller-00016-gb253435746d9 #0     ...
    Call Trace:
     <TASK>      put_ntfs+0x1ed/0x2a0 fs/ntfs3/super.c:463      ntfs_fs_free+0x6a/0xe0 fs/ntfs3/super.c:1363      put_fs_context+0x119/0x7a0 fs/fs_context.c:469      do_new_mount+0x2b4/0xad0 fs/namespace.c:3044      do_mount fs/namespace.c:3383 [inline]
     __do_sys_mount fs/namespace.c:3591 [inline]

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in     ntfs_update_mftmirr If ntfs_fill_super() wasn't called then sbi->sb will be equal to NULL. Code should     check this ptr before dereferencing. Syzbot hit this issue via passing wrong mount param as can be seen     from log below Fail log: ntfs3: Unknown parameter 'iochvrset' general protection fault, probably for non-     canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range     [0x0000000000000018-0x000000000000001f] CPU: 1 PID: 3589 Comm: syz-executor210 Not tainted     5.18.0-rc3-syzkaller-00016-gb253435746d9 #0 ... Call Trace: <TASK> put_ntfs+0x1ed/0x2a0     fs/ntfs3/super.c:463 ntfs_fs_free+0x6a/0xe0 fs/ntfs3/super.c:1363 put_fs_context+0x119/0x7a0     fs/fs_context.c:469 do_new_mount+0x2b4/0xad0 fs/namespace.c:3044 do_mount fs/namespace.c:3383 [inline]
    __do_sys_mount fs/namespace.c:3591 [inline] (CVE-2022-50057)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
366596	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131747)	Nessus	Unity Linux Local Security Checks	Local	medium
248781	Linux Distros Unpatched Vulnerability : CVE-2022-50057	Nessus	Misc.	Local	medium
166118	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2022-008 (ALASKERNEL-5.15-2022-008)	Nessus	Amazon Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2022-50057

medium

Tenable Plugins

medium

medium

high