CVE-2022-50643: cifs: Fix xid leak in cifs_copy_file_range()
Vulnerability summary
CVE-2022-50643 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.8% of scored vulnerabilities.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 5Timeline
- 09-12-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_copy_file_range() If the file is used by swap, before return -EOPNOTSUPP, should free the xid, otherwise, the xid will be leaked.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
10%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.20% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu103 products
- linux< 5.15.0-60.66
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1030.34
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.0.6-1
Linux1 product
- linux≥ 4e8aea30f7751ce7c4b158aa0c04e7744d281cc3, < bf49d4fe4ab7b8d812927a2c7b514864d5fc1bb2 | ≥ 4e8aea30f7751ce7c4b158aa0c04e7744d281cc3, < 27cfd3afaab000a455194338db3b7f2031fde9d0 | ≥ 4e8aea30f7751ce7c4b158aa0c04e7744d281cc3, < dc283313d1ca378d787cb55c1e580dc3de852680 | ≥ 4e8aea30f7751ce7c4b158aa0c04e7744d281cc3, < 9a97df404a402fe1174d2d1119f87ff2a0ca2fe9 | 5.7
3 vendors · 105 products
