CVE-2022-50072CWE-416

CVE-2022-50072

High · published June 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
9.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFSv4/pnfs: Fix a use-after-free bug in open

If someone cancels the open RPC call, then we must not try to free

either the open slot or the layoutget operation arguments, since they

are likely still in use by the hung RPC call.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00199 · 9.2th percentile
Weakness
CWE-416 · Use After Free
Published
2025-06-18T15:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19.247, < 4.19.2564.19.256
linux/linux_kernel≥ 5.4.198, < 5.4.2115.4.211
linux/linux_kernel≥ 5.10.122, < 5.10.1385.10.138
linux/linux_kernel≥ 5.15.47, < 5.15.635.15.63
linux/linux_kernel≥ 5.17.15, < 5.185.18
linux/linux_kernel≥ 5.18.4, < 5.19.45.19.4
References (6)
https://git.kernel.org/stable/c/0fffb46ff3d5ed4668aca96441ec7a25b793bd6f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2135e5d56278ffdb1c2e6d325dc6b87f669b9dac · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/76ffd2042438769298f34b76102b40dea89de616 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b03d1117e9be7c7da60e466eaf9beed85c5916c8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f7ee3b772d9de87387a725caa04bc041ac7fe5ec · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 JUN 11:02Z
    NFSv4/pnfs: Fix a use-after-free bug in open
    cvelistv5