CVE-2022-50821
SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
N/A
Published: December 30, 2025 at 12:08 PM UTC
Updated: June 17, 2026 at 05:24 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.3%
Description
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.10 ≤ v < 4.19.2703.10 ≤ v < 5.10.1633.10 ≤ v < 5.15.873.10 ≤ v < 5.4.2293.10 ≤ v < 6.0.173.10 ≤ v < 6.1.33.10 ≤ v < 6.23.1030d794bf49855f5e2a9e8dfbfad34211d1eb8b
Vendor states this is fixed in 2cd6026e257362f030c8be57abaf7fc0049df60a (fixed)
Vendor states this is fixed in 67eb848161c2799f2007968ea3bc87adb15c9567 (fixed)
Vendor states this is fixed in 76f2497a2faa6a4e91efb94a7f55705b403273fd (fixed)
Vendor states this is fixed in aa91afe597401b78baa7d751c71eedb92c80bd4d (fixed)
Vendor states this is fixed in c9ded831e2552b9c3cab7e2591a190e94f9d29c0 (fixed)
Vendor states this is fixed in d01fa993eb7fbc305f0a9c3e8bfac6513efc13b6 (fixed)
Vendor states this is fixed in da522b5fe1a5f8b7c20a0023e87b52a150e53bf5 (fixed)
Vendor states this is fixed in 3.10 (unaffected)
Vendor states this is fixed in 4.19.270 (unaffected)
Vendor states this is fixed in 5.10.163 (unaffected)
Vendor states this is fixed in 5.15.87 (unaffected)
Vendor states this is fixed in 5.4.229 (unaffected)
Vendor states this is fixed in 6.0.17 (unaffected)
Vendor states this is fixed in 6.1.3 (unaffected)
Vendor states this is fixed in 6.2 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (7)
Quick Info
StatusDEFERRED
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card