What’s Vulnerable › Vulnerabilities

CVE-2022-50853: NFSv4: Fix a credential leak in _nfs4_discover_trunking()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-30 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a credential leak in _nfs4_discover_trunking()

Affected products

• Linux kernel: from 5.15.77 before 5.15.86; from 5.18.10 before 5.19; 5.19 — fixed in 5.15.86, 5.19, 6.2

How to fix

Upgrade to a fixed version: Linux kernel 5.15.86, 5.19, 6.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/b247a9828f6607d41189fa6c2a3be754d33cae86
• https://git.kernel.org/stable/c/c6aca4c7ba8f6d40a0cfeeb09160dd8efdf97c64
• https://git.kernel.org/stable/c/dfad5d5e7511933c2ae3d12a8131840074c5a73d
• https://git.kernel.org/stable/c/e83458fce080dc23c25353a1af90bfecf79c7369

Get alerted when CVE-2022-50853 or the next vulnerability affects your stack