Log in Start free

Vulnerability · Published Sep 18, 2025 · Assigned by Linux

CVE-2022-50410NFSD: Protect against send buffer overflow in NFSv2 READ

Critical 9.8

In plain English

A critical-severity out-of-bounds write in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.4%top 62.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This works because there are no cases where an operation needs a large RPC Call message and a large RPC Reply at the same time. Once an RPC Call has been received, svc_process() updates svc_rqst::rq_res to describe the part of rq_pages that can be used for constructing the Reply. This means that the send buffer (rq_res) shrinks when the received RPC record containing the RPC Call is large. A client can force this shrinkage on TCP by sending a correctly- formed RPC Call header contained in an RPC record that is excessively large. The full maximum payload size cannot be constructed in that case.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.0.3-1DEBIAN-CVE-2022-50410
Debian:13linux6.0.3-1DEBIAN-CVE-2022-50410
Debian:14linux6.0.3-1DEBIAN-CVE-2022-50410
Ubuntu:22.04:LTSlinux5.15.0-56.62UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-aws5.15.0-1026.30UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-azure5.15.0-1029.36UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1029.36.1UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-gcp5.15.0-1025.32UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-gke5.15.0-1023.28UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1011.15UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-ibm5.15.0-1021.24UBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1021.26UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-kvm5.15.0-1024.29UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-56.62UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1015.15UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-oracle5.15.0-1025.31UBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-raspi5.15.0-1021.23UBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50410
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2022-50410
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2022-50410

Affected products (as reported)

VendorProductVersions
Linux Linux 4452435948424e5322c2a2fefbdc2cf3732cc45d – before 2007867c5874134f2271eb276398208070049dd34452435948424e5322c2a2fefbdc2cf3732cc45d – before 2be9331ca6061bc6ea32247266f45b8b210302444452435948424e5322c2a2fefbdc2cf3732cc45d – before ea4c3eee0fd72fcedaa238556044825639cd36074452435948424e5322c2a2fefbdc2cf3732cc45d – before 1868332032eccbab8c1878a0d918193058c0a9054452435948424e5322c2a2fefbdc2cf3732cc45d – before 401bc1f90874280a80b93f23be33a0e7e2d1f912
Linux Linux 2.6.19

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References