5.5

CVE-2022-50302

lockd: set other missing fields when unlocking files

In the Linux kernel, the following vulnerability has been resolved:

lockd: set other missing fields when unlocking files

vfs_lock_file() expects the struct file_lock to be fully initialised by
the caller. Re-exported NFSv3 has been seen to Oops if the fl_file field
is NULL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.15.56 < 5.15.86
Linux ≫ Linux Kernel Version >= 5.18.13 < 5.19
Linux ≫ Linux Kernel Version >= 5.19.1 < 6.0.16
Linux ≫ Linux Kernel Version >= 6.1 < 6.1.2
Linux ≫ Linux Kernel Version 5.19 Update -
Linux ≫ Linux Kernel Version 5.19 Update rc7
Linux ≫ Linux Kernel Version 5.19 Update rc8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.292
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/31c93ee5f1e4dc278b562e20f3c3274ac34997f3
Patch
https://git.kernel.org/stable/c/95d42a8d3d4ae84a0bd3ee23e1fee240cdf0a9f0
Patch
https://git.kernel.org/stable/c/688575aef211b0986fc51010116f5888a99d76a2
Patch
https://git.kernel.org/stable/c/d7aa9f7778316beb690f6e2763b6d672ad8b256f
Patch
https://git.kernel.org/stable/c/18ebd35b61b4693a0ddc270b6d4f18def232e770
Patch