CVE-2022-50717

CriticalCVSS 9.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nvmet-tcp: add bounds check on Transfer Tag

ttag is used as an index to get cmd in nvmet_tcp_handle_h2c_data_pdu(), add a bounds check to avoid out-of-bounds access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, < 0d150ccd55dbfad36f55855b40b381884c98456e; >= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, < d5bb45f47b37d10f010355686b28c9ebacb361d4; >= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, < ec8adf767e1cfa7031f853b8c71ba1963f07df15; >= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, < fcf82e4553db911d10234ff2390cfd0e2aa854e4; >= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, < 752593d04637ebdc87fd29cba81897f21ae053f0; >= 872d26a391da92ed8f0c0f5cb5fef428067b7f30, < b6a545ffa2c192b1e6da4a7924edac5ba9f4ea2b
LinuxLinux5.0

References

Timeline

Published
Dec 24, 2025
Last modified
Aug 4, 2026
NVD status
Deferred

Related CVEs from 2022

CVE-2022-50718In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix pci device refcount leak As comment of pci_get_domain_CVE-2022-507197.8In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: fix stack overflow in line6_midi_transmit Correctly calcuCVE-2022-50720In the Linux kernel, the following vulnerability has been resolved: x86/apic: Don't disable x2APIC if locked The APIC supports two modes, CVE-2022-50721In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg ThCVE-2022-50722In the Linux kernel, the following vulnerability has been resolved: media: ipu3-imgu: Fix NULL pointer dereference in active selection acceCVE-2022-50723In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix memory leak in bnxt_nvm_test() Free the kzalloc'ed bufferCVE-2022-50724In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix resource leak in regulator_register() I got some CVE-2022-50725In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init() KASAN repoCVE-2022-507267.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix possible use-after-free in async command interface mlx5_CVE-2022-50727In the Linux kernel, the following vulnerability has been resolved: scsi: efct: Fix possible memleak in efct_device_init() In efct_device_CVE-2022-50728In the Linux kernel, the following vulnerability has been resolved: s390/lcs: Fix return type of lcs_start_xmit() With clang's kernel contCVE-2022-50729In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix resource leak in ksmbd_session_rpc_open() When ksmbd_rpc_op