CVE-2022-50072

HIGH

Linux Kernel 4.19.247-4.19.255 - Use-After-Free in NFSv4/pnfs Open RPC

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call.

References (6)

Core 6

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 5.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (23)
Linux/Linux < 5.19
Linux/Linux 08d7a26d115cc7892668baa9750f64bd8baca29b
Linux/Linux 0ee5b9644f06b4d3cdcd9544f43f63312e425a4c - 76ffd2042438769298f34b76102b40dea89de616
Linux/Linux 4.19.247 - 4.19.256
Linux/Linux 4.19.256 - 4.19.*
Linux/Linux 5.10.122 - 5.10.138
Linux/Linux 5.10.138 - 5.10.*
Linux/Linux 5.15.47 - 5.15.63
Linux/Linux 5.15.63 - 5.15.*
Linux/Linux 5.17.15 - 5.18
... and 13 more
Published Jun 18, 2025
Tracked Since Feb 18, 2026