Back
CVE-2022-50348
nfsd: Fix a memory leak in an error handling path
Medium5.5EPSS 0.16%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.16% · top 95% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
- affected 6ee95d1c899186c0798cafd25998d436bcdb9618 – < acc393aecda05bf64ed13b732931462e07a1bf08
- affected 6ee95d1c899186c0798cafd25998d436bcdb9618 – < e060c4b9f33c1fca74df26d57a98e784295327e6
- affected 6ee95d1c899186c0798cafd25998d436bcdb9618 – < aed8816305575b38dcc77feb6f1bc1d0ed32f5b8
- affected 6ee95d1c899186c0798cafd25998d436bcdb9618 – < 733dd17158f96aaa25408dc39bbb2738fda9300e
- affected 6ee95d1c899186c0798cafd25998d436bcdb9618 – < cc3bca2110ac85cd964da997ef83d84cab0d49fb
- affected 6ee95d1c899186c0798cafd25998d436bcdb9618 – < fd1ef88049de09bc70d60b549992524cfc0e66ff
- affected 5.4
- unaffected < 5.4
- unaffected 5.4.220 – ≤ 5.4.*
- unaffected 5.10.150 – ≤ 5.10.*
- unaffected 5.15.75 – ≤ 5.15.*
- unaffected 5.19.17 – ≤ 5.19.*
- unaffected 6.0.3 – ≤ 6.0.*
- unaffected 6.1 – ≤ *
References (6)
- https://git.kernel.org/stable/c/acc393aecda05bf64ed13b732931462e07a1bf08 (opens in a new tab)
- https://git.kernel.org/stable/c/e060c4b9f33c1fca74df26d57a98e784295327e6 (opens in a new tab)
- https://git.kernel.org/stable/c/aed8816305575b38dcc77feb6f1bc1d0ed32f5b8 (opens in a new tab)
- https://git.kernel.org/stable/c/733dd17158f96aaa25408dc39bbb2738fda9300e (opens in a new tab)
- https://git.kernel.org/stable/c/cc3bca2110ac85cd964da997ef83d84cab0d49fb (opens in a new tab)
- https://git.kernel.org/stable/c/fd1ef88049de09bc70d60b549992524cfc0e66ff (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50348)Record last updated .