Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-50072 Details

Description

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/0fffb46ff3d5ed4668aca96441ec7a25b793bd6f kernel.orgPatch
https://git.kernel.org/stable/c/2135e5d56278ffdb1c2e6d325dc6b87f669b9dac kernel.orgPatch
https://git.kernel.org/stable/c/76ffd2042438769298f34b76102b40dea89de616 kernel.orgPatch
https://git.kernel.org/stable/c/a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1 kernel.orgPatch
https://git.kernel.org/stable/c/b03d1117e9be7c7da60e466eaf9beed85c5916c8 kernel.orgPatch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 4.19.247, < 4.19.256
>= 5.4.198, < 5.4.211
>= 5.10.122, < 5.10.138
>= 5.15.47, < 5.15.63
>= 5.17.15, < 5.18

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-50072
NVD Published Date:
Jun 18, 2025
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2022-50072 Details - Not Deferred