PT-2025-53979 · Linux+2 · Linux Kernel+2

Publicado 2022-11-28 · Atualizado 2026-02-24 · CVE-2022-50861

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:L/AC:H/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel's Network File System Daemon (NFSD) related to the NFSv2 GETACL result encoder. A conversion oversight within the xdr stream encoders resulted in the inclusion of extraneous data beyond the intended message boundary. While clients generally disregard this extra data, the NFSD process unnecessarily transmits it, leading to a memory leak of stale content. The issue stems from improperly setting the page length of the send buffer during the XDR stream conversion process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2026-02417

CVE-2022-50861

RHSA-2023:2458

RHSA-2023:7077

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Referências · 979

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50861.json · Exploit
• https://suse.com/security/cve/CVE-2023-53862 · Nota
• https://bugzilla.suse.com/1255970 · Nota
• https://suse.com/security/cve/CVE-2023-54025 · Nota
• https://suse.com/security/cve/CVE-2023-54040 · Nota
• https://bugzilla.suse.com/1254623 · Nota
• https://bugzilla.suse.com/1256211 · Nota
• https://suse.com/security/cve/CVE-2025-68183 · Nota
• https://bugzilla.suse.com/1256214 · Nota
• https://suse.com/security/cve/CVE-2022-50848 · Nota
• https://bugzilla.suse.com/1254842 · Nota
• https://bugzilla.suse.com/1210644 · Nota
• https://suse.com/security/cve/CVE-2022-50736 · Nota
• https://bugzilla.suse.com/1255925 · Nota
• https://suse.com/security/cve/CVE-2022-50709 · Nota