CVE-2022-50217

MEDIUM EPSS 7.9%
Published Jun 18, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jun 18, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: fuse: write inode in fuse_release() A race between write(2) and close(2) allows pages to be dirtied after fuse_flush -> write_inode_now(). If these pages are not flushed from fuse_release(), then there might not be a writable open file later. So any remaining dirty pages must be written back before the file is released. This is a partial revert of the blamed commit.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
7.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 2

VendorProductVersionRange
linuxlinux_kernel*≥5.16  –  <5.18.18
linuxlinux_kernel*≥5.19  –  <5.19.2

References 3

  • git.kernel.org https://git.kernel.org/stable/c/035ff33cf4db101250fb980a3941bf078f37a544
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4bd9d5d20f344d015422969302d12653c903c271
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5ccb0420b7c9334ab8122037847101931b899301
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/035ff33cf4db101250fb980a3941bf078f37a544
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4bd9d5d20f344d015422969302d12653c903c271
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5ccb0420b7c9334ab8122037847101931b899301
    Patch