CVE-2022-50046

MEDIUM EPSS 4.9%
Published Jun 18, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jun 18, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() The issue happens on some error handling paths. When the function fails to grab the object `xprt`, it simply returns 0, forgetting to decrease the reference count of another object `xps`, which is increased by rpc_sysfs_xprt_kobj_get_xprt_switch(), causing refcount leaks. Also, the function forgets to check whether `xps` is valid before using it, which may result in NULL-dereferencing issues. Fix it by adding proper error handling code when either `xprt` or `xps` is NULL.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
4.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel*≥5.14  –  <5.15.63
linuxlinux_kernel*≥5.16  –  <5.19.4
linuxlinux_kernel6.0any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/76fbeb1662b1c56514325118a07fba74dc4c79fe
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bfc48f1b0505ffcb03a6d749139b7577d6b81ae0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c0434f0e058648649250b8ed6078b66d773de723
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/76fbeb1662b1c56514325118a07fba74dc4c79fe
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bfc48f1b0505ffcb03a6d749139b7577d6b81ae0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c0434f0e058648649250b8ed6078b66d773de723
    Patch