CVE-2022-50302

lockd: set other missing fields when unlocking files

Published: 9/15/2025 Last updated: 9/15/2025 Reserved: 9/15/2025

In the Linux kernel, the following vulnerability has been resolved: lockd: set other missing fields when unlocking files vfs_lock_file() expects the struct file_lock to be fully initialised by the caller. Re-exported NFSv3 has been seen to Oops if the fl_file field is NULL.

CNA assigner: Linux (416baaa9-dc9f-4396-8d5f-8c081fb06d67) Requested by: n/a

Opam packages affected (27)

albatross cdrom conf-bpftool conf-libbpf conf-linux-libc-dev core core_unix hvsock mirage-block-unix mm ocaml-probes orun rawlink rawlink-eio rawlink-lwt shell solo5 solo5-bindings-hvt solo5-bindings-spt solo5-cross-aarch64 solo5-kernel-ukvm tracy-client tuntap uring vhd-format vhd-format-lwt xapi-stdext-unix

Products affected (2)

Product	Vendor	Version
Linux	Linux	prior to 4.5.0
Linux	Linux	23.0 ap368706

References (5)

https://git.kernel.org/stable/c/31c93ee5f1e4dc278b562e20f3c3274ac34997f3
https://git.kernel.org/stable/c/95d42a8d3d4ae84a0bd3ee23e1fee240cdf0a9f0
https://git.kernel.org/stable/c/688575aef211b0986fc51010116f5888a99d76a2
https://git.kernel.org/stable/c/d7aa9f7778316beb690f6e2763b6d672ad8b256f
https://git.kernel.org/stable/c/18ebd35b61b4693a0ddc270b6d4f18def232e770