Back
CVE-2022-50072
NFSv4/pnfs: Fix a use-after-free bug in open
High7.8EPSS 0.20%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call.
Timeline
ID reserved
By Linux
Published
- 14 months later
· 14 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.20% · top 90% of all CVEs (7 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected 6b3fc1496e7227cd6a39a80bbfb7588ef7c7a010 – < 0fffb46ff3d5ed4668aca96441ec7a25b793bd6f
- affected a2b3be930e79cc5d9d829f158e31172b2043f0cd – < f7ee3b772d9de87387a725caa04bc041ac7fe5ec
- affected 0ee5b9644f06b4d3cdcd9544f43f63312e425a4c – < 76ffd2042438769298f34b76102b40dea89de616
- affected d4c2a041ed3ba114502d5ed6ace5b1a48d637a8e – < a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1
- affected 6949493884fe88500de4af182588e071cf1544ee – < b03d1117e9be7c7da60e466eaf9beed85c5916c8
- affected 6949493884fe88500de4af182588e071cf1544ee – < 2135e5d56278ffdb1c2e6d325dc6b87f669b9dac
- affected 08d7a26d115cc7892668baa9750f64bd8baca29b
- affected ea759ae0a9ae5acee677d722129710ac89cc59c1
- affected 4.19.247 – < 4.19.256
- affected 5.4.198 – < 5.4.211
- affected 5.10.122 – < 5.10.138
- affected 5.15.47 – < 5.15.63
- affected 5.17.15 – < 5.18
- affected 5.18.4 – < 5.19
- affected 5.19
- unaffected < 5.19
- unaffected 4.19.256 – ≤ 4.19.*
- unaffected 5.4.211 – ≤ 5.4.*
- unaffected 5.10.138 – ≤ 5.10.*
- unaffected 5.15.63 – ≤ 5.15.*
- unaffected 5.19.4 – ≤ 5.19.*
- unaffected 6.0 – ≤ *
References (6)
- https://git.kernel.org/stable/c/0fffb46ff3d5ed4668aca96441ec7a25b793bd6f (opens in a new tab)
- https://git.kernel.org/stable/c/f7ee3b772d9de87387a725caa04bc041ac7fe5ec (opens in a new tab)
- https://git.kernel.org/stable/c/76ffd2042438769298f34b76102b40dea89de616 (opens in a new tab)
- https://git.kernel.org/stable/c/a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1 (opens in a new tab)
- https://git.kernel.org/stable/c/b03d1117e9be7c7da60e466eaf9beed85c5916c8 (opens in a new tab)
- https://git.kernel.org/stable/c/2135e5d56278ffdb1c2e6d325dc6b87f669b9dac (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50072)Record last updated .