CVE-2022-3238: 
Linux Debian vulnerability analysis and mitigation

A double-free vulnerability (CVE-2022-3238) was discovered in the Linux kernel's NTFS3 subsystem, specifically when a user triggers remount and umount operations simultaneously. The vulnerability was reported in November 2022 and affects systems with the NTFS3 filesystem module (NVD, Red Hat).

The vulnerability occurs when a character set is set for the NTFS3 filesystem at mount time, followed by simultaneous remount and umount operations. This leads to character set strings being released twice, resulting in a double-free condition. The affected strings can be allocated up to 0x10 bytes of memory. The vulnerability requires CAPSYSADMIN privileges to exploit, as mounting filesystems requires these permissions (Red Hat).

A local user with appropriate permissions could exploit this vulnerability to crash the system or potentially escalate their privileges on the system (Ubuntu).

The vulnerability can be mitigated by updating the Linux kernel to a patched version. The specific fix involves addressing the double-free condition in the NTFS3 filesystem module's character set handling during mount operations (NVD).