CVE-2022-50148

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-50148
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-50148.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-50148
Downstream
Published
2025-06-18T11:03:08.462Z
Modified
2025-11-29T05:39:43.292776Z
Summary
kernfs: fix potential NULL dereference in __kernfs_remove
Details

In the Linux kernel, the following vulnerability has been resolved:

kernfs: fix potential NULL dereference in _kernfsremove

When lockdep is enabled, lockdepassertheld_write would cause potential NULL pointer dereference.

Fix the following smatch warnings:

fs/kernfs/dir.c:1353 _kernfsremove() warn: variable dereferenced before check 'kn' (see line 1346)

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50148.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
393c3714081a53795bbff0e985d24146def6f57f
Fixed
b871986d9d3071f5082664ac274d93f08db257cd
Fixed
4a9f35b8729c5bf13ea671c908c17ed74c48fc50
Fixed
72b5d5aef246a0387cefa23121dd90901c7a691a

Affected versions

v5.*

v5.16
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.18.1
v5.18.10
v5.18.11
v5.18.12
v5.18.13
v5.18.14
v5.18.15
v5.18.16
v5.18.17
v5.18.2
v5.18.3
v5.18.4
v5.18.5
v5.18.6
v5.18.7
v5.18.8
v5.18.9
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.19.1

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
5.18.18
Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
5.19.2