CVE-2022-49166: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-49166 affects the Linux kernel's NTFS filesystem implementation. The vulnerability occurs in the ntfs_read_inode_mount function where ntfs_malloc_nofs is invoked with zero allocation size, triggering a BUG in the __ntfs_malloc function (Kernel Git). This issue was discovered and reported by the syzkaller project (NVD).

The vulnerability exists in the fs/ntfs/inode.c file where the ntfs_read_inode_mount function fails to validate the allocation size before calling ntfs_malloc_nofs. When ni->attr_list_size is zero, the function attempts to allocate memory with a zero size, which triggers a BUG condition in the __ntfs_malloc function (Kernel Git).

When exploited, this vulnerability can trigger a kernel BUG condition, potentially leading to a denial of service on affected systems (NVD).

The vulnerability can be triggered when mounting an NTFS filesystem with specially crafted file system structures. It was discovered through automated testing by the syzkaller project (Kernel Git).

The issue has been fixed by adding a sanity check on ni->attr_list_size before memory allocation. The fix includes adding an error check and appropriate error handling when the allocation size is zero (Kernel Git).