CVE-2022-50302

CVE-2022-50302

High · published September 15, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
29.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

lockd: set other missing fields when unlocking files

vfs_lock_file() expects the struct file_lock to be fully initialised by

the caller. Re-exported NFSv3 has been seen to Oops if the fl_file field

is NULL.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.6th percentile
Published
2025-09-15T19:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 5.15.56, < 5.15.865.15.86
linux/linux_kernel≥ 5.18.13, < 5.195.19
linux/linux_kernel≥ 5.19.1, < 6.0.166.0.16
linux/linux_kernel≥ 6.1, < 6.1.26.1.2
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
https://git.kernel.org/stable/c/18ebd35b61b4693a0ddc270b6d4f18def232e770 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/31c93ee5f1e4dc278b562e20f3c3274ac34997f3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/688575aef211b0986fc51010116f5888a99d76a2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/95d42a8d3d4ae84a0bd3ee23e1fee240cdf0a9f0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d7aa9f7778316beb690f6e2763b6d672ad8b256f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 SEP 14:45Z
    lockd: set other missing fields when unlocking files
    cvelistv5