CVE-2022-50385

NFS: Fix an Oops in nfs_d_automount()

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix an Oops in nfs_d_automount()

When mounting from a NFSv4 referral, path->dentry can end up being a negative dentry, so derive the struct nfs_server from the dentry itself instead.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2b0143b5c986be1ce8408b3aadc4709e0a94429d to before 5458bc0f9df639d83471ca384152cc62dbee0aebAffected 2b0143b5c986be1ce8408b3aadc4709e0a94429d to before f12377abac15fb4e8698225ac386894f8ae63598Affected 2b0143b5c986be1ce8408b3aadc4709e0a94429d to before b6fd25d64b0de27991d6bd677f0adf69ad6ff07aAffected 2b0143b5c986be1ce8408b3aadc4709e0a94429d to before 6f3d56783fbed861e483736a7001bdafd0dddd53Affected 2b0143b5c986be1ce8408b3aadc4709e0a94429d to before 35e3b6ae84935d0d7ff76cbdaa83411b0ad5e471Affected
LinuxLinux	4.1Affected before 4.1Not affected 5.10.163 through 5.10.Not affected 5.15.86 through 5.15.Not affected 6.0.16 through 6.0.Not affected 6.1.2 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

2b0143b5c986be1ce8408b3aadc4709e0a94429d to before 5458bc0f9df639d83471ca384152cc62dbee0aebAffected
2b0143b5c986be1ce8408b3aadc4709e0a94429d to before f12377abac15fb4e8698225ac386894f8ae63598Affected
2b0143b5c986be1ce8408b3aadc4709e0a94429d to before b6fd25d64b0de27991d6bd677f0adf69ad6ff07aAffected
2b0143b5c986be1ce8408b3aadc4709e0a94429d to before 6f3d56783fbed861e483736a7001bdafd0dddd53Affected
2b0143b5c986be1ce8408b3aadc4709e0a94429d to before 35e3b6ae84935d0d7ff76cbdaa83411b0ad5e471Affected

LinuxLinux

4.1Affected
before 4.1Not affected
5.10.163 through 5.10.*Not affected
5.15.86 through 5.15.*Not affected
6.0.16 through 6.0.*Not affected
6.1.2 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.