In the Linux kernel, the following vulnerability has been resolved: lockd: set other missing fields when unlocking files vfs_lock_file() expects the struct file_lock to be fully initialised by the caller. Re-exported NFSv3 has been seen to Oops if the fl_file field is NULL.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/18ebd35b61b4693a0ddc270b6d4f18def232e770 cve-icon cve-icon
https://git.kernel.org/stable/c/31c93ee5f1e4dc278b562e20f3c3274ac34997f3 cve-icon cve-icon
https://git.kernel.org/stable/c/688575aef211b0986fc51010116f5888a99d76a2 cve-icon cve-icon
https://git.kernel.org/stable/c/95d42a8d3d4ae84a0bd3ee23e1fee240cdf0a9f0 cve-icon cve-icon
https://git.kernel.org/stable/c/d7aa9f7778316beb690f6e2763b6d672ad8b256f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091558-CVE-2022-50302-89ee@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2022-50302 cve-icon
https://www.cve.org/CVERecord?id=CVE-2022-50302 cve-icon
History

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 17 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Mon, 15 Sep 2025 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: lockd: set other missing fields when unlocking files vfs_lock_file() expects the struct file_lock to be fully initialised by the caller. Re-exported NFSv3 has been seen to Oops if the fl_file field is NULL.
Title lockd: set other missing fields when unlocking files
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-15T14:45:57.924Z

Updated: 2025-09-15T14:45:57.924Z

Reserved: 2025-09-15T14:18:36.812Z

Link: CVE-2022-50302

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-15T15:15:41.720

Modified: 2025-09-15T15:22:27.090

Link: CVE-2022-50302

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-15T00:00:00Z

Links: CVE-2022-50302 - Bugzilla