CVE-2022-50455
Linux Kernel vulnerability analysis and mitigation

Overview

CVE-2022-50455 affects the Linux kernel and involves a null pointer dereference vulnerability in the NFS filesystem component. According to the vulnerability description, the issue occurs when parsing parameters in nfs_fs_context_parse_param() function, where it fails to check for null pointers when the fs string has zero length (NVD, Ubuntu).

Technical details

The vulnerability stems from the vfs_parse_fs_string() function setting param->string to a null pointer when the fs string has zero length. The nfs_fs_context_parse_param() function then dereferences param->string without proper null pointer validation, which can trigger a null pointer dereference bug. The issue was resolved by adding sanity checks on param->string in nfs_fs_context_parse_param() (NVD).

Impact

If exploited, this vulnerability could cause a null pointer dereference in the Linux kernel's NFS filesystem component, potentially leading to system crashes or denial of service conditions (Ubuntu).

Mitigation and workarounds

The vulnerability has been patched in various Linux distributions. Ubuntu has marked this as a medium priority issue and has released fixes for affected versions. System administrators should apply the available kernel updates to mitigate this vulnerability (Ubuntu).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-71142N/AN/A
  • Linux KernelLinux Kernel
  • bpftool
NoNoJan 14, 2026
CVE-2025-71137N/AN/A
  • Linux KernelLinux Kernel
  • linux-azure-nvidia-6.14
NoYesJan 14, 2026
CVE-2025-71135N/AN/A
  • Linux KernelLinux Kernel
  • linux-oracle-6.14
NoNoJan 14, 2026
CVE-2025-71134N/AN/A
  • Linux KernelLinux Kernel
  • kernel-zfcpdump-devel
NoNoJan 14, 2026
CVE-2025-71133N/AN/A
  • Linux KernelLinux Kernel
  • kernel-rt-debug-devel
NoYesJan 14, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management