CVE-2022-50217
published 2025-06-18CVE-2022-50217: In the Linux kernel, the following vulnerability has been resolved: fuse: write inode in fuse_release() A race between write(2) and close(2) allows pages to be…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
fuse: write inode in fuse_release()
A race between write(2) and close(2) allows pages to be dirtied after
fuse_flush -> write_inode_now(). If these pages are not flushed from
fuse_release(), then there might not be a writable open file later. So any
remaining dirty pages must be written back before the file is released.
This is a partial revert of the blamed commit.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.2-1 (bookworm) | linux 6.0.2-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 36ea23374d1f7b6a9d96a2b61d38830fdf23e45d < 5ccb0420b7c9334ab8122037847101931b899301 | 5ccb0420b7c9334ab8122037847101931b899301 |
| linux | linux | >= 36ea23374d1f7b6a9d96a2b61d38830fdf23e45d < 4bd9d5d20f344d015422969302d12653c903c271 | 4bd9d5d20f344d015422969302d12653c903c271 |
| linux | linux | >= 36ea23374d1f7b6a9d96a2b61d38830fdf23e45d < 035ff33cf4db101250fb980a3941bf078f37a544 | 035ff33cf4db101250fb980a3941bf078f37a544 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 0 < 6.0.2-1 | 6.0.2-1 |
| linux | linux_kernel | >= 5.16 < 5.18.18 | 5.18.18 |
| linux | linux_kernel | >= 5.19 < 5.19.2 | 5.19.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50217: In the Linux kernel, the following vulnerability has been resolved: fuse: write inode in fuse_release() A race between write(2) and close(2) allows pa
osv·2025-06-18·CVSS 5.5
CVE-2022-50217 [MEDIUM] CVE-2022-50217: In the Linux kernel, the following vulnerability has been resolved: fuse: write inode in fuse_release() A race between write(2) and close(2) allows pa
In the Linux kernel, the following vulnerability has been resolved: fuse: write inode in fuse_release() A race between write(2) and close(2) allows pages to be dirtied after fuse_flush -> write_inode_now(). If these pages are not flushed from fuse_release(), then there might not be a writable open file later. So any remaining dirty pages must be written back before the file is released. This is a partial revert of the blamed commit.
GHSA
GHSA-f5r8-w4hp-7v3r: In the Linux kernel, the following vulnerability has been resolved:
fuse: write inode in fuse_release()
A race between write(2) and close(2) allows
ghsa_unreviewed·2025-06-18
CVE-2022-50217 [MEDIUM] GHSA-f5r8-w4hp-7v3r: In the Linux kernel, the following vulnerability has been resolved:
fuse: write inode in fuse_release()
A race between write(2) and close(2) allows
In the Linux kernel, the following vulnerability has been resolved:
fuse: write inode in fuse_release()
A race between write(2) and close(2) allows pages to be dirtied after
fuse_flush -> write_inode_now(). If these pages are not flushed from
fuse_release(), then there might not be a writable open file later. So any
remaining dirty pages must be written back before the file is released.
This is a partial revert of the blamed commit.
Red Hat
kernel: Linux kernel (FUSE): Data corruption or Denial of Service due to a race condition during file operations
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-50217 [MEDIUM] CWE-367 kernel: Linux kernel (FUSE): Data corruption or Denial of Service due to a race condition during file operations
kernel: Linux kernel (FUSE): Data corruption or Denial of Service due to a race condition during file operations
In the Linux kernel, the following vulnerability has been resolved:
fuse: write inode in fuse_release()
A race between write(2) and close(2) allows pages to be dirtied after
fuse_flush -> write_inode_now(). If these pages are not flushed from
fuse_release(), then there might not be a writable open file later. So any
remaining dirty pages must be written back before the file is released.
This is a partial revert of the blamed commit.
A flaw was found in the Linux kernel's Filesystem in Userspace (FUSE) subsystem. A race condition exists between write and close operations, which a local attacker with low privileges could exploit. This vulnerability allows data pages to be modifi
Debian
CVE-2022-50217: linux - In the Linux kernel, the following vulnerability has been resolved: fuse: write...
vendor_debian·2022·CVSS 5.5
CVE-2022-50217 [MEDIUM] CVE-2022-50217: linux - In the Linux kernel, the following vulnerability has been resolved: fuse: write...
In the Linux kernel, the following vulnerability has been resolved: fuse: write inode in fuse_release() A race between write(2) and close(2) allows pages to be dirtied after fuse_flush -> write_inode_now(). If these pages are not flushed from fuse_release(), then there might not be a writable open file later. So any remaining dirty pages must be written back before the file is released. This is a partial revert of the blamed commit.
Scope: local
bookworm: resolved (fixed in 6.0.2-1)
bullseye: resolved
forky: resolved (fixed in 6.0.2-1)
sid: resolved (fixed in 6.0.2-1)
trixie: resolved (fixed in 6.0.2-1)
No detection rules found.
No public exploits indexed.
2025-06-18
Published