CVE-2022-50006: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-50006 is a vulnerability discovered in the Linux kernel's NFSv4.2 implementation, specifically related to problems with __nfs42_ssc_open function. The vulnerability was published on June 18, 2025, affecting various Linux kernel versions (NVD, Ubuntu).

The vulnerability involves two main issues in the NFSv4.2 implementation: First, a destination server during a COPY operation incorrectly accepts using the passed in filehandle when it's not a regular filehandle. Second, when alloc_file_pseudo() fails, the system fails to decrement a reference on the newly created inode, resulting in a memory leak (NVD, Wiz).

The primary impact of this vulnerability is a potential memory leak in the Linux kernel when alloc_file_pseudo() fails during NFSv4.2 operations. This could lead to resource exhaustion over time (Wiz).

Several Linux distributions have released patches to address this vulnerability. Ubuntu has fixed the issue in version 5.15.0-53.59~20.04.1 for the linux-hwe-5.15 package. Various other Linux distributions and versions have either been patched or marked as not affected (Ubuntu).