CVE-2022-50302: lockd: set other missing fields when unlocking files
In the Linux kernel, the following vulnerability has been resolved:
lockd: set other missing fields when unlocking files
vfslockfile() expects the struct filelock to be fully initialised by the caller. Re-exported NFSv3 has been seen to Oops if the flfile field is NULL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-50302?
CVE-2022-50302 is classified as a medium-severity vulnerability in the Linux kernel.
How do I fix CVE-2022-50302?
To fix CVE-2022-50302, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What are the potential impacts of CVE-2022-50302?
CVE-2022-50302 can lead to system instability and crashes when re-exported NFSv3 encounters a NULL fl_file field.
Which versions of Linux kernel are affected by CVE-2022-50302?
CVE-2022-50302 affects specific versions of the Linux kernel where the vfs_lock_file() function is improperly handling file locks.
Is CVE-2022-50302 under active exploitation?
As of now, there is no public evidence suggesting that CVE-2022-50302 is actively being exploited in the wild.