CVE-2022-50148

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-50148

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: kernfs: fix potential NULL dereference in __kernfs_remove When lockdep is enabled, lockdep_assert_held_write would cause potential NULL pointer dereference. Fix the following smatch warnings: fs/kernfs/dir.c:1353 __kernfs_remove() warn: variable dereferenced before check 'kn' (see line 1346)

References
Link Resource
https://git.kernel.org/stable/c/4a9f35b8729c5bf13ea671c908c17ed74c48fc50 Patch
https://git.kernel.org/stable/c/72b5d5aef246a0387cefa23121dd90901c7a691a Patch
https://git.kernel.org/stable/c/b871986d9d3071f5082664ac274d93f08db257cd Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Nov 2025, 19:57

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/4a9f35b8729c5bf13ea671c908c17ed74c48fc50 - () https://git.kernel.org/stable/c/4a9f35b8729c5bf13ea671c908c17ed74c48fc50 - Patch
References () https://git.kernel.org/stable/c/72b5d5aef246a0387cefa23121dd90901c7a691a - () https://git.kernel.org/stable/c/72b5d5aef246a0387cefa23121dd90901c7a691a - Patch
References () https://git.kernel.org/stable/c/b871986d9d3071f5082664ac274d93f08db257cd - () https://git.kernel.org/stable/c/b871986d9d3071f5082664ac274d93f08db257cd - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: kernfs: se corrige una posible desreferencia de punteros NULL en __kernfs_remove. Cuando lockdep está habilitado, lockdep_assert_held_write podría causar una posible desreferencia de punteros NULL. Se corrigen las siguientes advertencias de coincidencia: fs/kernfs/dir.c:1353 __kernfs_remove() warn: variable desreferenciada antes de la comprobación 'kn' (véase la línea 1346).

18 Jun 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-18 11:15

Updated : 2025-11-17 19:57

NVD link : CVE-2022-50148

Mitre link : CVE-2022-50148

CVE.ORG link : CVE-2022-50148

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference