CVE-2022-50335: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50335 is a vulnerability discovered in the Linux kernel affecting the 9p filesystem implementation. The issue was disclosed and documented in September 2025. The vulnerability stems from an uninitialized request refcount in the 9p filesystem client code, specifically when handling new requests (NVD).

The vulnerability occurs when a new request is allocated but not fully initialized before being added to the identifier (idr). If the p9readwork process receives a response before the refcount is initiated, it will use an uninitialized request, resulting in a corrupted request data structure. The issue manifests in the client code path, particularly during request handling in the net/9p/client.c file (NVD).

When exploited, this vulnerability can lead to memory corruption at specific memory addresses and potential system instability. The issue affects the kernel's handling of 9p filesystem operations, particularly during request processing and memory management (NVD).

The fix involves initializing the refcount to zero before adding it to the identifier (idr). This ensures proper initialization of request structures before they are used in the filesystem operations (NVD).