PT-2025-37604 · Linux+2 · Linux Kernel+2

Published 2022-12-10 · Updated 2025-09-20 · CVE-2022-50302

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where vfs lock file() may encounter an issue if the fl file field within the struct file lock is NULL. This can occur during NFSv3 operations when unlocking files, potentially leading to system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2026-02523

CVE-2022-50302

RHSA-2023:2458

Affected Products

Astra Linux

Linux Kernel

Red Hat

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50302.json · Exploit
• https://bdu.fstec.ru/vul/2026-02523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50302 · Security Note
• https://git.kernel.org/stable/c/d7aa9f7778316beb690f6e2763b6d672ad8b256f · Patch
• https://git.kernel.org/stable/c/688575aef211b0986fc51010116f5888a99d76a2 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50302 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50302 · Vendor Advisory
• https://git.kernel.org/stable/c/31c93ee5f1e4dc278b562e20f3c3274ac34997f3 · Patch
• https://git.kernel.org/stable/c/95d42a8d3d4ae84a0bd3ee23e1fee240cdf0a9f0 · Patch
• https://cve.org/CVERecord?id=CVE-2022-50302 · Security Note
• https://git.kernel.org/stable/c/18ebd35b61b4693a0ddc270b6d4f18def232e770 · Patch
• https://osv.dev/vulnerability/CVE-2022-50302 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.86 · Note
• https://git.kernel.org/linus/18ebd35b61b4693a0ddc270b6d4f18def232e770 · Note
• https://access.redhat.com/security/cve/cve-2022-50302 · Note