CVE-2022-50380

mm: /proc/pid/smaps_rollup: fix no vma's null-deref

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: /proc/pid/smaps_rollup: fix no vma's null-deref

Commit 258f669e7e88 ("mm: /proc/pid/smaps_rollup: convert to single value seq_file") introduced a null-deref if there are no vma's in the task in show_smaps_rollup.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	258f669e7e88c18edbc23fe5ce00a476b924551f to before dbe863bce7679c7f5ec0e993d834fe16c5e687b5Affected 258f669e7e88c18edbc23fe5ce00a476b924551f to before 6bb8769326c46db3058780c0640dcc49d8187b24Affected 258f669e7e88c18edbc23fe5ce00a476b924551f to before a50ed2d28727ff605d95fb9a53be8ff94e8eaaf4Affected 258f669e7e88c18edbc23fe5ce00a476b924551f to before 33fc9e26b7cb39f0d4219c875a2451802249c225Affected 258f669e7e88c18edbc23fe5ce00a476b924551f to before 97898139ca9b81ba9322a585e07490983c53b55aAffected 258f669e7e88c18edbc23fe5ce00a476b924551f to before c4c84f06285e48f80e9843d0775ad92714ffc35aAffected
LinuxLinux	4.19Affected before 4.19Not affected 4.19.264 through 4.19.Not affected 5.4.221 through 5.4.Not affected 5.10.152 through 5.10.Not affected 5.15.76 through 5.15.Not affected 6.0.6 through 6.0.*Not affected 6.1 and laterNot affected

Product

Versions

LinuxLinux

258f669e7e88c18edbc23fe5ce00a476b924551f to before dbe863bce7679c7f5ec0e993d834fe16c5e687b5Affected
258f669e7e88c18edbc23fe5ce00a476b924551f to before 6bb8769326c46db3058780c0640dcc49d8187b24Affected
258f669e7e88c18edbc23fe5ce00a476b924551f to before a50ed2d28727ff605d95fb9a53be8ff94e8eaaf4Affected
258f669e7e88c18edbc23fe5ce00a476b924551f to before 33fc9e26b7cb39f0d4219c875a2451802249c225Affected
258f669e7e88c18edbc23fe5ce00a476b924551f to before 97898139ca9b81ba9322a585e07490983c53b55aAffected
258f669e7e88c18edbc23fe5ce00a476b924551f to before c4c84f06285e48f80e9843d0775ad92714ffc35aAffected

LinuxLinux

4.19Affected
before 4.19Not affected
4.19.264 through 4.19.*Not affected
5.4.221 through 5.4.*Not affected
5.10.152 through 5.10.*Not affected
5.15.76 through 5.15.*Not affected
6.0.6 through 6.0.*Not affected
6.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.