What’s Vulnerable › Vulnerabilities

CVE-2022-50072: NFSv4/pnfs: Fix a use-after-free bug in open

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-18 · updated 2026-08-04
• Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call.

Affected products

• Linux kernel: from 4.19.247 before 4.19.256; from 5.4.198 before 5.4.211; from 5.10.122 before 5.10.138; from 5.15.47 before 5.15.63; from 5.17.15 before 5.18; from 5.18.4 before 5.19.4 — fixed in 4.19.256, 5.10.138, 5.15.63, 5.18, 5.19.4, 5.4.211

How to fix

Upgrade to a fixed version: Linux kernel 4.19.256, 5.10.138, 5.15.63, 5.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0fffb46ff3d5ed4668aca96441ec7a25b793bd6f
• https://git.kernel.org/stable/c/2135e5d56278ffdb1c2e6d325dc6b87f669b9dac
• https://git.kernel.org/stable/c/76ffd2042438769298f34b76102b40dea89de616
• https://git.kernel.org/stable/c/a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1
• https://git.kernel.org/stable/c/b03d1117e9be7c7da60e466eaf9beed85c5916c8
• https://git.kernel.org/stable/c/f7ee3b772d9de87387a725caa04bc041ac7fe5ec

Get alerted when CVE-2022-50072 or the next vulnerability affects your stack