CVE Catalog

CVE-2022-50235

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

32th percentile - higher than 32% of all known CVEs

Summary

In the Linux kernel, NFSD has a send buffer overflow vulnerability in NFSv2 READDIR. The previous limit on the @count argument was restored to prevent buffer overflow attacks.

Risk Assessment

An attacker can cause buffer overflow, potentially leading to system crash or code execution.

Recommendation

Apply the Linux kernel patch that restores the @count limit in NFSD.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READDIR Restore the previous limit on the @count argument to prevent a buffer overflow attack.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS