CVE-2022-49362: Linux Kernel

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noref() can free @nf, so don't dereference @nf immediately upon return from nfsd_file_put_noref().

Affected products

• Linux Linux Kernel: from 5.18, before 5.18.4 (fixed in 5.18.4); version 5.19 only

Published 2025-02-26. Last modified 2026-08-04.