Linux Kernel Uninitialized Pointer Vulnerability in statmount_string Function

A vulnerability has been identified in the Linux kernel's statmount_string function, where an output offset pointer ('offp') can remain uninitialized. This issue arises because certain cases directly assign values to struct fields without using the designated offset pointer, leading to a potential uninitialized dereference when the pointer is later updated. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability could lead to a situation where an uninitialized pointer is dereferenced, potentially causing undefined behavior or a crash.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree to address this vulnerability.