CVE-2022-50821
UnknownEPSS 0.21%
Last modified
CVE-2022-50821 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 030d794bf49855f5e2a9e8dfbfad34211d1eb08b, < 76f2497a2faa6a4e91efb94a7f55705b403273fd; >= 030d794bf49855f5e2a9e8dfbfad34211d1eb08b, < aa91afe597401b78baa7d751c71eedb92c80bd4d; >= 030d794bf49855f5e2a9e8dfbfad34211d1eb08b, < 2cd6026e257362f030c8be57abaf7fc0049df60a; >= 030d794bf49855f5e2a9e8dfbfad34211d1eb08b, < d01fa993eb7fbc305f0a9c3e8bfac6513efc13b6; >= 030d794bf49855f5e2a9e8dfbfad34211d1eb08b, < 67eb848161c2799f2007968ea3bc87adb15c9567; >= 030d794bf49855f5e2a9e8dfbfad34211d1eb08b, < c9ded831e2552b9c3cab7e2591a190e94f9d29c0; >= 030d794bf49855f5e2a9e8dfbfad34211d1eb08b, < da522b5fe1a5f8b7c20a0023e87b52a150e53bf5 |
| Linux | Linux | 3.10 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2022-50821?
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
How severe is CVE-2022-50821?
Severity scoring for CVE-2022-50821 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2022-50821?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-50815In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50816In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50817In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50818In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50819In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50820In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50822In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2022-50823In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50824In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50825In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50826In the Linux kernel, the following vulnerability has been re…
- CVE-2022-50827In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2022-50821?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST