GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-50323 (GCVE-0-2022-50323)

Vulnerability from cvelistv5 – Published: 2025-09-15 14:48 – Updated: 2026-05-23 15:24
VLAI
Title
net: do not sense pfmemalloc status in skb_append_pagefrags()
Summary
In the Linux kernel, the following vulnerability has been resolved: net: do not sense pfmemalloc status in skb_append_pagefrags() skb_append_pagefrags() is used by af_unix and udp sendpage() implementation so far. In commit 326140063946 ("tcp: TX zerocopy should not sense pfmemalloc status") we explained why we should not sense pfmemalloc status for pages owned by user space. We should also use skb_fill_page_desc_noacc() in skb_append_pagefrags() to avoid following KCSAN report: BUG: KCSAN: data-race in lru_add_fn / skb_append_pagefrags write to 0xffffea00058fc1c8 of 8 bytes by task 17319 on cpu 0: __list_add include/linux/list.h:73 [inline] list_add include/linux/list.h:88 [inline] lruvec_add_folio include/linux/mm_inline.h:323 [inline] lru_add_fn+0x327/0x410 mm/swap.c:228 folio_batch_move_lru+0x1e1/0x2a0 mm/swap.c:246 lru_add_drain_cpu+0x73/0x250 mm/swap.c:669 lru_add_drain+0x21/0x60 mm/swap.c:773 free_pages_and_swap_cache+0x16/0x70 mm/swap_state.c:311 tlb_batch_pages_flush mm/mmu_gather.c:59 [inline] tlb_flush_mmu_free mm/mmu_gather.c:256 [inline] tlb_flush_mmu+0x5b2/0x640 mm/mmu_gather.c:263 tlb_finish_mmu+0x86/0x100 mm/mmu_gather.c:363 exit_mmap+0x190/0x4d0 mm/mmap.c:3098 __mmput+0x27/0x1b0 kernel/fork.c:1185 mmput+0x3d/0x50 kernel/fork.c:1207 copy_process+0x19fc/0x2100 kernel/fork.c:2518 kernel_clone+0x166/0x550 kernel/fork.c:2671 __do_sys_clone kernel/fork.c:2812 [inline] __se_sys_clone kernel/fork.c:2796 [inline] __x64_sys_clone+0xc3/0xf0 kernel/fork.c:2796 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd read to 0xffffea00058fc1c8 of 8 bytes by task 17325 on cpu 1: page_is_pfmemalloc include/linux/mm.h:1817 [inline] __skb_fill_page_desc include/linux/skbuff.h:2432 [inline] skb_fill_page_desc include/linux/skbuff.h:2453 [inline] skb_append_pagefrags+0x210/0x600 net/core/skbuff.c:3974 unix_stream_sendpage+0x45e/0x990 net/unix/af_unix.c:2338 kernel_sendpage+0x184/0x300 net/socket.c:3561 sock_sendpage+0x5a/0x70 net/socket.c:1054 pipe_to_sendpage+0x128/0x160 fs/splice.c:361 splice_from_pipe_feed fs/splice.c:415 [inline] __splice_from_pipe+0x222/0x4d0 fs/splice.c:559 splice_from_pipe fs/splice.c:594 [inline] generic_splice_sendpage+0x89/0xc0 fs/splice.c:743 do_splice_from fs/splice.c:764 [inline] direct_splice_actor+0x80/0xa0 fs/splice.c:931 splice_direct_to_actor+0x305/0x620 fs/splice.c:886 do_splice_direct+0xfb/0x180 fs/splice.c:974 do_sendfile+0x3bf/0x910 fs/read_write.c:1255 __do_sys_sendfile64 fs/read_write.c:1323 [inline] __se_sys_sendfile64 fs/read_write.c:1309 [inline] __x64_sys_sendfile64+0x10c/0x150 fs/read_write.c:1309 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd value changed: 0x0000000000000000 -> 0xffffea00058fc188 Reported by Kernel Concurrency Sanitizer on: CPU: 1 PID: 17325 Comm: syz-executor.0 Not tainted 6.1.0-rc1-syzkaller-00158-g440b7895c990-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 8527c9a6bf8e54fef0a8d3d7d8874a48c725c915 , < 92b4c5c3fa810212da20088bcc6c0a77fc8607bd (git)
Affected: 3261400639463a853ba2b3be8bd009c2a8089775 , < 847a2859814b31392340a2b16604b25afaa92dcc (git)
Affected: 3261400639463a853ba2b3be8bd009c2a8089775 , < 228ebc41dfab5b5d34cd76835ddb0ca8ee12f513 (git)
Affected: 6730c48ed6b0cd939fc9b30b2d621ce0b89bea83 (git)
Affected: 5.15.68 , < 5.15.77 (semver)
Affected: 5.19.9 , < 5.20 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.0
Unaffected: 0 , < 6.0 (semver)
Unaffected: 5.15.77 , ≤ 5.15.* (semver)
Unaffected: 6.0.7 , ≤ 6.0.* (semver)
Unaffected: 6.1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/core/skbuff.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "92b4c5c3fa810212da20088bcc6c0a77fc8607bd",
              "status": "affected",
              "version": "8527c9a6bf8e54fef0a8d3d7d8874a48c725c915",
              "versionType": "git"
            },
            {
              "lessThan": "847a2859814b31392340a2b16604b25afaa92dcc",
              "status": "affected",
              "version": "3261400639463a853ba2b3be8bd009c2a8089775",
              "versionType": "git"
            },
            {
              "lessThan": "228ebc41dfab5b5d34cd76835ddb0ca8ee12f513",
              "status": "affected",
              "version": "3261400639463a853ba2b3be8bd009c2a8089775",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "6730c48ed6b0cd939fc9b30b2d621ce0b89bea83",
              "versionType": "git"
            },
            {
              "lessThan": "5.15.77",
              "status": "affected",
              "version": "5.15.68",
              "versionType": "semver"
            },
            {
              "lessThan": "5.20",
              "status": "affected",
              "version": "5.19.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/core/skbuff.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.0"
            },
            {
              "lessThan": "6.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.77",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.77",
                  "versionStartIncluding": "5.15.68",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.7",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.19.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: do not sense pfmemalloc status in skb_append_pagefrags()\n\nskb_append_pagefrags() is used by af_unix and udp sendpage()\nimplementation so far.\n\nIn commit 326140063946 (\"tcp: TX zerocopy should not sense\npfmemalloc status\") we explained why we should not sense\npfmemalloc status for pages owned by user space.\n\nWe should also use skb_fill_page_desc_noacc()\nin skb_append_pagefrags() to avoid following KCSAN report:\n\nBUG: KCSAN: data-race in lru_add_fn / skb_append_pagefrags\n\nwrite to 0xffffea00058fc1c8 of 8 bytes by task 17319 on cpu 0:\n__list_add include/linux/list.h:73 [inline]\nlist_add include/linux/list.h:88 [inline]\nlruvec_add_folio include/linux/mm_inline.h:323 [inline]\nlru_add_fn+0x327/0x410 mm/swap.c:228\nfolio_batch_move_lru+0x1e1/0x2a0 mm/swap.c:246\nlru_add_drain_cpu+0x73/0x250 mm/swap.c:669\nlru_add_drain+0x21/0x60 mm/swap.c:773\nfree_pages_and_swap_cache+0x16/0x70 mm/swap_state.c:311\ntlb_batch_pages_flush mm/mmu_gather.c:59 [inline]\ntlb_flush_mmu_free mm/mmu_gather.c:256 [inline]\ntlb_flush_mmu+0x5b2/0x640 mm/mmu_gather.c:263\ntlb_finish_mmu+0x86/0x100 mm/mmu_gather.c:363\nexit_mmap+0x190/0x4d0 mm/mmap.c:3098\n__mmput+0x27/0x1b0 kernel/fork.c:1185\nmmput+0x3d/0x50 kernel/fork.c:1207\ncopy_process+0x19fc/0x2100 kernel/fork.c:2518\nkernel_clone+0x166/0x550 kernel/fork.c:2671\n__do_sys_clone kernel/fork.c:2812 [inline]\n__se_sys_clone kernel/fork.c:2796 [inline]\n__x64_sys_clone+0xc3/0xf0 kernel/fork.c:2796\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nread to 0xffffea00058fc1c8 of 8 bytes by task 17325 on cpu 1:\npage_is_pfmemalloc include/linux/mm.h:1817 [inline]\n__skb_fill_page_desc include/linux/skbuff.h:2432 [inline]\nskb_fill_page_desc include/linux/skbuff.h:2453 [inline]\nskb_append_pagefrags+0x210/0x600 net/core/skbuff.c:3974\nunix_stream_sendpage+0x45e/0x990 net/unix/af_unix.c:2338\nkernel_sendpage+0x184/0x300 net/socket.c:3561\nsock_sendpage+0x5a/0x70 net/socket.c:1054\npipe_to_sendpage+0x128/0x160 fs/splice.c:361\nsplice_from_pipe_feed fs/splice.c:415 [inline]\n__splice_from_pipe+0x222/0x4d0 fs/splice.c:559\nsplice_from_pipe fs/splice.c:594 [inline]\ngeneric_splice_sendpage+0x89/0xc0 fs/splice.c:743\ndo_splice_from fs/splice.c:764 [inline]\ndirect_splice_actor+0x80/0xa0 fs/splice.c:931\nsplice_direct_to_actor+0x305/0x620 fs/splice.c:886\ndo_splice_direct+0xfb/0x180 fs/splice.c:974\ndo_sendfile+0x3bf/0x910 fs/read_write.c:1255\n__do_sys_sendfile64 fs/read_write.c:1323 [inline]\n__se_sys_sendfile64 fs/read_write.c:1309 [inline]\n__x64_sys_sendfile64+0x10c/0x150 fs/read_write.c:1309\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nvalue changed: 0x0000000000000000 -\u003e 0xffffea00058fc188\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 1 PID: 17325 Comm: syz-executor.0 Not tainted 6.1.0-rc1-syzkaller-00158-g440b7895c990-dirty #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:24:16.572Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/92b4c5c3fa810212da20088bcc6c0a77fc8607bd"
        },
        {
          "url": "https://git.kernel.org/stable/c/847a2859814b31392340a2b16604b25afaa92dcc"
        },
        {
          "url": "https://git.kernel.org/stable/c/228ebc41dfab5b5d34cd76835ddb0ca8ee12f513"
        }
      ],
      "title": "net: do not sense pfmemalloc status in skb_append_pagefrags()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2022-50323",
    "datePublished": "2025-09-15T14:48:57.418Z",
    "dateReserved": "2025-09-15T14:18:36.814Z",
    "dateUpdated": "2026-05-23T15:24:16.572Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-50323",
      "date": "2026-09-17",
      "epss": "0.00154",
      "percentile": "0.04887"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-50323\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-15T15:15:44.357\",\"lastModified\":\"2026-06-17T05:23:14.110\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: do not sense pfmemalloc status in skb_append_pagefrags()\\n\\nskb_append_pagefrags() is used by af_unix and udp sendpage()\\nimplementation so far.\\n\\nIn commit 326140063946 (\\\"tcp: TX zerocopy should not sense\\npfmemalloc status\\\") we explained why we should not sense\\npfmemalloc status for pages owned by user space.\\n\\nWe should also use skb_fill_page_desc_noacc()\\nin skb_append_pagefrags() to avoid following KCSAN report:\\n\\nBUG: KCSAN: data-race in lru_add_fn / skb_append_pagefrags\\n\\nwrite to 0xffffea00058fc1c8 of 8 bytes by task 17319 on cpu 0:\\n__list_add include/linux/list.h:73 [inline]\\nlist_add include/linux/list.h:88 [inline]\\nlruvec_add_folio include/linux/mm_inline.h:323 [inline]\\nlru_add_fn+0x327/0x410 mm/swap.c:228\\nfolio_batch_move_lru+0x1e1/0x2a0 mm/swap.c:246\\nlru_add_drain_cpu+0x73/0x250 mm/swap.c:669\\nlru_add_drain+0x21/0x60 mm/swap.c:773\\nfree_pages_and_swap_cache+0x16/0x70 mm/swap_state.c:311\\ntlb_batch_pages_flush mm/mmu_gather.c:59 [inline]\\ntlb_flush_mmu_free mm/mmu_gather.c:256 [inline]\\ntlb_flush_mmu+0x5b2/0x640 mm/mmu_gather.c:263\\ntlb_finish_mmu+0x86/0x100 mm/mmu_gather.c:363\\nexit_mmap+0x190/0x4d0 mm/mmap.c:3098\\n__mmput+0x27/0x1b0 kernel/fork.c:1185\\nmmput+0x3d/0x50 kernel/fork.c:1207\\ncopy_process+0x19fc/0x2100 kernel/fork.c:2518\\nkernel_clone+0x166/0x550 kernel/fork.c:2671\\n__do_sys_clone kernel/fork.c:2812 [inline]\\n__se_sys_clone kernel/fork.c:2796 [inline]\\n__x64_sys_clone+0xc3/0xf0 kernel/fork.c:2796\\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\\ndo_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80\\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\\n\\nread to 0xffffea00058fc1c8 of 8 bytes by task 17325 on cpu 1:\\npage_is_pfmemalloc include/linux/mm.h:1817 [inline]\\n__skb_fill_page_desc include/linux/skbuff.h:2432 [inline]\\nskb_fill_page_desc include/linux/skbuff.h:2453 [inline]\\nskb_append_pagefrags+0x210/0x600 net/core/skbuff.c:3974\\nunix_stream_sendpage+0x45e/0x990 net/unix/af_unix.c:2338\\nkernel_sendpage+0x184/0x300 net/socket.c:3561\\nsock_sendpage+0x5a/0x70 net/socket.c:1054\\npipe_to_sendpage+0x128/0x160 fs/splice.c:361\\nsplice_from_pipe_feed fs/splice.c:415 [inline]\\n__splice_from_pipe+0x222/0x4d0 fs/splice.c:559\\nsplice_from_pipe fs/splice.c:594 [inline]\\ngeneric_splice_sendpage+0x89/0xc0 fs/splice.c:743\\ndo_splice_from fs/splice.c:764 [inline]\\ndirect_splice_actor+0x80/0xa0 fs/splice.c:931\\nsplice_direct_to_actor+0x305/0x620 fs/splice.c:886\\ndo_splice_direct+0xfb/0x180 fs/splice.c:974\\ndo_sendfile+0x3bf/0x910 fs/read_write.c:1255\\n__do_sys_sendfile64 fs/read_write.c:1323 [inline]\\n__se_sys_sendfile64 fs/read_write.c:1309 [inline]\\n__x64_sys_sendfile64+0x10c/0x150 fs/read_write.c:1309\\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\\ndo_syscall_64+0x2b/0x70 arch/x86/entry/common.c:80\\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\\n\\nvalue changed: 0x0000000000000000 -\u003e 0xffffea00058fc188\\n\\nReported by Kernel Concurrency Sanitizer on:\\nCPU: 1 PID: 17325 Comm: syz-executor.0 Not tainted 6.1.0-rc1-syzkaller-00158-g440b7895c990-dirty #0\\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/core/skbuff.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"8527c9a6bf8e54fef0a8d3d7d8874a48c725c915\",\"lessThan\":\"92b4c5c3fa810212da20088bcc6c0a77fc8607bd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3261400639463a853ba2b3be8bd009c2a8089775\",\"lessThan\":\"847a2859814b31392340a2b16604b25afaa92dcc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3261400639463a853ba2b3be8bd009c2a8089775\",\"lessThan\":\"228ebc41dfab5b5d34cd76835ddb0ca8ee12f513\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"6730c48ed6b0cd939fc9b30b2d621ce0b89bea83\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.15.68\",\"lessThan\":\"5.15.77\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.19.9\",\"lessThan\":\"5.20\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/core/skbuff.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.0\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.77\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.0.7\",\"lessThanOrEqual\":\"6.0.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.68\",\"versionEndExcluding\":\"5.15.77\",\"matchCriteriaId\":\"F9838B2C-7013-4FA9-9A74-DDF6B426182B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.19.9\",\"versionEndExcluding\":\"6.0\",\"matchCriteriaId\":\"C642BB6C-5AE7-4FF1-BFED-4CCC8FC1E127\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.1\",\"versionEndExcluding\":\"6.0.7\",\"matchCriteriaId\":\"8E5B300B-886E-4B07-B4A0-D7F41770FD29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BE551E5-89CF-47A8-9B26-03CE727FBA37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E5FB72F-67CE-43CC-83FE-541604D98182\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.0:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A0A7397-F5F8-4753-82DC-9A11288E696D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.0:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"E6DE049A-ABA8-41DD-988C-8C088358EE9B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7E331DA-1FB0-4DEC-91AC-7DA69D461C11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"17F0B248-42CF-4AE6-A469-BB1BAE7F4705\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/228ebc41dfab5b5d34cd76835ddb0ca8ee12f513\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/847a2859814b31392340a2b16604b25afaa92dcc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/92b4c5c3fa810212da20088bcc6c0a77fc8607bd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-29T21:45:36+00:00",
      "cve": "CVE-2022-50323",
      "id": "CVE-2022-50323",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_affected": "122",
      "product_status:known_not_affected": "152",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: do not sense pfmemalloc status in skb_append_pagefrags()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-50323.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.