CVE-2022-50717: Linux

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmet_tcp_handle_h2c_data_pdu(), add a bounds check to avoid out-of-bounds access.

Affected products

• Linux Linux: from 5.0, before 5.4.220 (fixed in 5.4.220); from 5.5, before 5.10.150 (fixed in 5.10.150); from 5.11, before 5.15.75 (fixed in 5.15.75); from 5.16, before 5.19.17 (fixed in 5.19.17); from 5.20, before 6.0.3 (fixed in 6.0.3)

Published 2025-12-24. Last modified 2026-08-04.