CVE-2022-50348
published 2025-09-16CVE-2022-50348: In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails, the…
PriorityP415medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
nfsd: Fix a memory leak in an error handling path
If this memdup_user() call fails, the memory allocated in a previous call
a few lines above should be freed. Otherwise it leaks.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.0.3-1 (bookworm) | linux 6.0.3-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6ee95d1c899186c0798cafd25998d436bcdb9618 < acc393aecda05bf64ed13b732931462e07a1bf08 | acc393aecda05bf64ed13b732931462e07a1bf08 |
| linux | linux | >= 6ee95d1c899186c0798cafd25998d436bcdb9618 < e060c4b9f33c1fca74df26d57a98e784295327e6 | e060c4b9f33c1fca74df26d57a98e784295327e6 |
| linux | linux | >= 6ee95d1c899186c0798cafd25998d436bcdb9618 < aed8816305575b38dcc77feb6f1bc1d0ed32f5b8 | aed8816305575b38dcc77feb6f1bc1d0ed32f5b8 |
| linux | linux | >= 6ee95d1c899186c0798cafd25998d436bcdb9618 < 733dd17158f96aaa25408dc39bbb2738fda9300e | 733dd17158f96aaa25408dc39bbb2738fda9300e |
| linux | linux | >= 6ee95d1c899186c0798cafd25998d436bcdb9618 < cc3bca2110ac85cd964da997ef83d84cab0d49fb | cc3bca2110ac85cd964da997ef83d84cab0d49fb |
| linux | linux | >= 6ee95d1c899186c0798cafd25998d436bcdb9618 < fd1ef88049de09bc70d60b549992524cfc0e66ff | fd1ef88049de09bc70d60b549992524cfc0e66ff |
| linux | linux_kernel | >= 0 < 5.10.158-1 | 5.10.158-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 0 < 6.0.3-1 | 6.0.3-1 |
| linux | linux_kernel | >= 5.11 < 5.15.75 | 5.15.75 |
| linux | linux_kernel | >= 5.16 < 5.19.17 | 5.19.17 |
| linux | linux_kernel | >= 5.4 < 5.4.220 | 5.4.220 |
| linux | linux_kernel | >= 5.5 < 5.10.150 | 5.10.150 |
| linux | linux_kernel | >= 6.0 < 6.0.3 | 6.0.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-50348: In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails
osv·2025-09-16·CVSS 5.5
CVE-2022-50348 [MEDIUM] CVE-2022-50348: In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails
In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks.
GHSA
GHSA-ww8x-45hp-h7qm: In the Linux kernel, the following vulnerability has been resolved:
nfsd: Fix a memory leak in an error handling path
If this memdup_user() call fai
ghsa_unreviewed·2025-09-16
CVE-2022-50348 [MEDIUM] CWE-401 GHSA-ww8x-45hp-h7qm: In the Linux kernel, the following vulnerability has been resolved:
nfsd: Fix a memory leak in an error handling path
If this memdup_user() call fai
In the Linux kernel, the following vulnerability has been resolved:
nfsd: Fix a memory leak in an error handling path
If this memdup_user() call fails, the memory allocated in a previous call
a few lines above should be freed. Otherwise it leaks.
Red Hat
kernel: nfsd: Fix a memory leak in an error handling path
vendor_redhat·2025-09-16·CVSS 5.5
CVE-2022-50348 [MEDIUM] CWE-772 kernel: nfsd: Fix a memory leak in an error handling path
kernel: nfsd: Fix a memory leak in an error handling path
In the Linux kernel, the following vulnerability has been resolved:
nfsd: Fix a memory leak in an error handling path
If this memdup_user() call fails, the memory allocated in a previous call
a few lines above should be freed. Otherwise it leaks.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Fix deferred
Package: kernel-rt (Red Hat Enterprise Linux 9) - Fix deferred
Debian
CVE-2022-50348: linux - In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a...
vendor_debian·2022·CVSS 5.5
CVE-2022-50348 [MEDIUM] CVE-2022-50348: linux - In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a...
In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks.
Scope: local
bookworm: resolved (fixed in 6.0.3-1)
bullseye: resolved (fixed in 5.10.158-1)
forky: resolved (fixed in 6.0.3-1)
sid: resolved (fixed in 6.0.3-1)
trixie: resolved (fixed in 6.0.3-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/733dd17158f96aaa25408dc39bbb2738fda9300ehttps://git.kernel.org/stable/c/acc393aecda05bf64ed13b732931462e07a1bf08https://git.kernel.org/stable/c/aed8816305575b38dcc77feb6f1bc1d0ed32f5b8https://git.kernel.org/stable/c/cc3bca2110ac85cd964da997ef83d84cab0d49fbhttps://git.kernel.org/stable/c/e060c4b9f33c1fca74df26d57a98e784295327e6https://git.kernel.org/stable/c/fd1ef88049de09bc70d60b549992524cfc0e66ff
2025-09-16
Published