CVE-2022-50235: NFSD: Protect against send buffer overflow in NFSv2 READDIR

Q: What is the severity of CVE-2022-50235?

CVE-2022-50235 is considered a high severity vulnerability due to its potential to cause a buffer overflow attack.

Q: How do I fix CVE-2022-50235?

To fix CVE-2022-50235, update your Linux kernel to a version that includes the patch resolving the send buffer overflow in NFSv2 READDIR.

Q: What are the potential impacts of CVE-2022-50235?

The potential impacts of CVE-2022-50235 include unauthorized access and exploitation of the system due to buffer overflow.

Q: Is CVE-2022-50235 present in all Linux kernel versions?

No, CVE-2022-50235 specifically affects certain versions of the Linux kernel prior to the incorporation of the security fix.

Q: What components of the Linux kernel are affected by CVE-2022-50235?

CVE-2022-50235 affects the NFSD component of the Linux kernel that handles NFSv2 READDIR operations.

Published Sep 15, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

NFSD: Protect against send buffer overflow in NFSv2 READDIR

Restore the previous limit on the @count argument to prevent a buffer overflow attack.

Affected Software

122 affected componentsFixes available

Linux Linux kernel

Linux Linux kernel>=5.15.12<5.15.75

Linux Linux kernel>=5.16.1<5.19.17

Linux Linux kernel>=6.0<6.0.3

Linux Linux kernel=5.16

Linux Linux kernel=5.16-rc7

Linux Linux kernel=5.16-rc8

debian/linux<6.0.3-1

6.0.3-1

debian/linux<6.0.3-1

6.0.3-1

debian/linux<6.0.3-1

6.0.3-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.15<5.15.0-1026.30~20.04.2

5.15.0-1026.30~20.04.2

ubuntu/linux-azure-5.15<5.15.0-1029.36~20.04.1

5.15.0-1029.36~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1025.32~20.04.2

5.15.0-1025.32~20.04.2

ubuntu/linux-hwe-5.15<5.15.0-56.62~20.04.1

5.15.0-56.62~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1021.26~20.04.1

5.15.0-1021.26~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-56.62~20.04.1

5.15.0-56.62~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1025.31~20.04.2

5.15.0-1025.31~20.04.2

ubuntu/linux-riscv-5.15<5.15.0-1026.30~20.04.2

5.15.0-1026.30~20.04.2

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-56.62

5.15.0-56.62

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1026.30

5.15.0-1026.30

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1029.36

5.15.0-1029.36

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1029.36.1

5.15.0-1029.36.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1025.32

5.15.0-1025.32

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gke<5.15.0-1023.28

5.15.0-1023.28

ubuntu/linux-gkeop<5.15.0-1011.15

5.15.0-1011.15

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-ibm<5.15.0-1021.24

5.15.0-1021.24

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1021.26

5.15.0-1021.26

ubuntu/linux-kvm<5.15.0-1024.29

5.15.0-1024.29

ubuntu/linux-lowlatency<5.15.0-56.62

5.15.0-56.62

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia<5.15.0-1015.15

5.15.0-1015.15

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1025.31

5.15.0-1025.31

ubuntu/linux-oracle-6.5*

ubuntu/linux-raspi<5.15.0-1021.23

5.15.0-1021.23

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-realtime<5.15.0-1028.31

5.15.0-1028.31

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-intel*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-oem-6.11*

ubuntu/linux-oem-6.8*

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.0.3-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.30~20.04.2
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.36~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.32~20.04.2
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-56.62~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.26~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-56.62~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.31~20.04.2
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.30~20.04.2
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-56.62
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1026.30
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.36
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1029.36.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.32
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1023.28
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1011.15
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.24
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.26
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1024.29
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-56.62
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1015.15
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.31
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.23
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1028.31
Configuration
Restore the previous limit on the @count argument to prevent a send buffer overflow.
Linux kernel NFSD NFSv2 READDIR @count limit = previous limit

Event History

Sep 15, 2025

CVE Published

via MITRE·02:01 PM

Data Sourced

via MITRE·02:01 PM

DescriptionSeverity

Data Sourced

via OSV·02:15 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·02:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-50235?

CVE-2022-50235 is considered a high severity vulnerability due to its potential to cause a buffer overflow attack.

How do I fix CVE-2022-50235?

To fix CVE-2022-50235, update your Linux kernel to a version that includes the patch resolving the send buffer overflow in NFSv2 READDIR.

What are the potential impacts of CVE-2022-50235?

The potential impacts of CVE-2022-50235 include unauthorized access and exploitation of the system due to buffer overflow.

Is CVE-2022-50235 present in all Linux kernel versions?

No, CVE-2022-50235 specifically affects certain versions of the Linux kernel prior to the incorporation of the security fix.

What components of the Linux kernel are affected by CVE-2022-50235?

CVE-2022-50235 affects the NFSD component of the Linux kernel that handles NFSv2 READDIR operations.

CVE-2022-50235: NFSD: Protect against send buffer overflow in NFSv2 READDIR

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2022-50235?

How do I fix CVE-2022-50235?

What are the potential impacts of CVE-2022-50235?

Is CVE-2022-50235 present in all Linux kernel versions?

What components of the Linux kernel are affected by CVE-2022-50235?

Company

Resources

Contact