CVE-2022-50148

MEDIUM EPSS 4.9%
Published Jun 18, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jun 18, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: kernfs: fix potential NULL dereference in __kernfs_remove When lockdep is enabled, lockdep_assert_held_write would cause potential NULL pointer dereference. Fix the following smatch warnings: fs/kernfs/dir.c:1353 __kernfs_remove() warn: variable dereferenced before check 'kn' (see line 1346)

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
4.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 2

VendorProductVersionRange
linuxlinux_kernel*≥5.17  –  <5.18.18
linuxlinux_kernel*≥5.19  –  <5.19.2

References 3

  • git.kernel.org https://git.kernel.org/stable/c/4a9f35b8729c5bf13ea671c908c17ed74c48fc50
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/72b5d5aef246a0387cefa23121dd90901c7a691a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b871986d9d3071f5082664ac274d93f08db257cd
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/4a9f35b8729c5bf13ea671c908c17ed74c48fc50
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/72b5d5aef246a0387cefa23121dd90901c7a691a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b871986d9d3071f5082664ac274d93f08db257cd
    Patch