CVE-2022-50717

CriticalCVSS 9.8

Published: 24/12/2025(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.71%

50th percentile - higher than 50% of all known CVEs

Summary

In the Linux kernel, the nvmet-tcp module lacked a bounds check for the Transfer Tag (ttag), which is used as an index into the command array. A bounds check was added to prevent out-of-bounds access.

Risk Assessment

The vulnerability may lead to out-of-bounds memory access, potentially causing system crashes or privilege escalation.

Recommendation

Apply the Linux kernel update containing the fix for CVE-2022-50717.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmet_tcp_handle_h2c_data_pdu(), add a bounds check to avoid out-of-bounds access.