CVE-2022-50380

MEDIUM

Linux Kernel 4.19-6.0.5 - NULL Pointer Dereference in smaps_rollup VMA Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: mm: /proc/pid/smaps_rollup: fix no vma's null-deref Commit 258f669e7e88 ("mm: /proc/pid/smaps_rollup: convert to single value seq_file") introduced a null-deref if there are no vma's in the task in show_smaps_rollup.

References (6)

Core 6

Scores

CVSS v3 5.5
EPSS 0.0015
EPSS Percentile 4.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (20)
linux/Kernel 4.19.0 - 4.19.264linux
linux/Kernel 4.20.0 - 5.4.221linux
linux/Kernel 5.11.0 - 5.15.76linux
linux/Kernel 5.16.0 - 6.0.6linux
linux/Kernel 5.5.0 - 5.10.152linux
Linux/Linux < 4.19
Linux/Linux 258f669e7e88c18edbc23fe5ce00a476b924551f - 33fc9e26b7cb39f0d4219c875a2451802249c225
Linux/Linux 258f669e7e88c18edbc23fe5ce00a476b924551f - 6bb8769326c46db3058780c0640dcc49d8187b24
Linux/Linux 258f669e7e88c18edbc23fe5ce00a476b924551f - 97898139ca9b81ba9322a585e07490983c53b55a
Linux/Linux 258f669e7e88c18edbc23fe5ce00a476b924551f - a50ed2d28727ff605d95fb9a53be8ff94e8eaaf4
... and 10 more
Published Sep 18, 2025
Tracked Since Feb 18, 2026