CVE-2022-50235CWE-787

CVE-2022-50235

Critical · published September 15, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Protect against send buffer overflow in NFSv2 READDIR

Restore the previous limit on the @count argument to prevent a

buffer overflow attack.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00429 · 36.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-09-15T18:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15.12, < 5.15.755.15.75
linux/linux_kernel≥ 5.16.1, < 5.19.175.19.17
linux/linux_kernel≥ 6.0, < 6.0.36.0.3
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
https://git.kernel.org/stable/c/00b4492686e0497fdb924a9d4c8f6f99377e176c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0e57d696f60dee6117a8ace0cac7c5761d375277 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c2a878095b5c6f04f90553a3c45872f990dab14e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dc7f225090c29a5f3b9419b1af32846a201555e7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f59c74df82f6ac9d2ea4e01aa3ae7c6c4481652d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 SEP 14:01Z
    NFSD: Protect against send buffer overflow in NFSv2 READDIR
    cvelistv5