CVE-2022-50348: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails, the memory allocated in a previous call a few lines above should be freed. Otherwise it leaks.

Affected products

  • Linux Linux Kernel: from 5.4, before 5.4.220 (fixed in 5.4.220); from 5.5, before 5.10.150 (fixed in 5.10.150); from 5.11, before 5.15.75 (fixed in 5.15.75); from 5.16, before 5.19.17 (fixed in 5.19.17); from 6.0, before 6.0.3 (fixed in 6.0.3)

Published 2025-09-16. Last modified 2026-06-17.