PT-2025-53979 · Linux+2 · Linux Kernel+2

Published 2022-11-28 · Updated 2026-02-24 · CVE-2022-50861

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel's Network File System Daemon (NFSD) related to the NFSv2 GETACL result encoder. A conversion oversight within the xdr stream encoders resulted in the inclusion of extraneous data beyond the intended message boundary. While clients generally disregard this extra data, the NFSD process unnecessarily transmits it, leading to a memory leak of stale content. The issue stems from improperly setting the page length of the send buffer during the XDR stream conversion process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-02417

CVE-2022-50861

RHSA-2023:2458

RHSA-2023:7077

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Centos

Linux Kernel

Red Hat

References · 979

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50861.json · Exploit
• https://ubuntu.com/security/CVE-2022-50861 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50861 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-50861 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-50861 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50861 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02417 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50861 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-50861 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-53862 · Note
• https://bugzilla.suse.com/1255970 · Note