CVE-2022-50348

nfsd: Fix a memory leak in an error handling path

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: Fix a memory leak in an error handling path

If this memdup_user() call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	6ee95d1c899186c0798cafd25998d436bcdb9618 to before acc393aecda05bf64ed13b732931462e07a1bf08Affected 6ee95d1c899186c0798cafd25998d436bcdb9618 to before e060c4b9f33c1fca74df26d57a98e784295327e6Affected 6ee95d1c899186c0798cafd25998d436bcdb9618 to before aed8816305575b38dcc77feb6f1bc1d0ed32f5b8Affected 6ee95d1c899186c0798cafd25998d436bcdb9618 to before 733dd17158f96aaa25408dc39bbb2738fda9300eAffected 6ee95d1c899186c0798cafd25998d436bcdb9618 to before cc3bca2110ac85cd964da997ef83d84cab0d49fbAffected 6ee95d1c899186c0798cafd25998d436bcdb9618 to before fd1ef88049de09bc70d60b549992524cfc0e66ffAffected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.220 through 5.4.Not affected 5.10.150 through 5.10.Not affected 5.15.75 through 5.15.Not affected 5.19.17 through 5.19.Not affected 6.0.3 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

6ee95d1c899186c0798cafd25998d436bcdb9618 to before acc393aecda05bf64ed13b732931462e07a1bf08Affected
6ee95d1c899186c0798cafd25998d436bcdb9618 to before e060c4b9f33c1fca74df26d57a98e784295327e6Affected
6ee95d1c899186c0798cafd25998d436bcdb9618 to before aed8816305575b38dcc77feb6f1bc1d0ed32f5b8Affected
6ee95d1c899186c0798cafd25998d436bcdb9618 to before 733dd17158f96aaa25408dc39bbb2738fda9300eAffected
6ee95d1c899186c0798cafd25998d436bcdb9618 to before cc3bca2110ac85cd964da997ef83d84cab0d49fbAffected
6ee95d1c899186c0798cafd25998d436bcdb9618 to before fd1ef88049de09bc70d60b549992524cfc0e66ffAffected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.220 through 5.4.*Not affected
5.10.150 through 5.10.*Not affected
5.15.75 through 5.15.*Not affected
5.19.17 through 5.19.*Not affected
6.0.3 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.